Skip to content
OpenAdvisories
High · 8.8 Public exploit CVE-2024-22263 EUVD-2024-19827

Arbitrary File Write Vulnerability in Spring Cloud Data Flow

Published Jun 19, 2024 · Updated Aug 1, 2024 · Assigned by vmware

Vendor: Spring by VMware Tanzu Product: Spring Cloud Skipper

Description

Spring Cloud Data Flow is a microservices-based Streaming and Batch data processing in Cloud Foundry and Kubernetes. The Skipper server has the ability to receive upload package requests. However, due to improper sanitization for upload path, a malicious user who has access to skipper server api can use a crafted upload request to write arbitrary file to any location on file system, may even compromises the server.

Affected products

VendorProductAffectedFixed
Spring by VMware Tanzu Spring Cloud Skipper 2.11.0 - 2.11.2, 2.10.x —

Public exploits

Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.

Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.

GitHub 1 repository

Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.

Advisories 1

References