{"cvss":0.0,"datePublished":"2022-08-19T00:00:00Z","dateUpdated":"2022-08-19T00:00:00Z","description":"When using routing functionality in VMware Tanzu's Spring Cloud Function, it is possible for a user to provide a specially crafted SpEL as a routing-expression that may result in remote code execution and access to local resources.","dueDate":"2022-09-15T00:00:00Z","id":"CVE-2022-22963","kev_catalogs":["vulncheck"],"knownRansomwareCampaignUse":"Unknown","product":"Spring Cloud","requiredAction":"Apply updates per vendor instructions.","severity":"HIGH","source":"vulncheck_kev","title":"VMware Tanzu Spring Cloud Function Remote Code Execution Vulnerability","vendor":"VMware"}