{"id":19416,"date":"2022-03-28T08:03:37","date_gmt":"2022-03-28T08:03:37","guid":{"rendered":"https:\/\/nsfocusglobal.com\/?p=19416"},"modified":"2026-04-17T18:07:44","modified_gmt":"2026-04-17T18:07:44","slug":"spring-cloud-function-spel-expression-injection-vulnerability-alert","status":"publish","type":"post","link":"https:\/\/nsfocusglobal.com\/pt-br\/spring-cloud-function-spel-expression-injection-vulnerability-alert\/","title":{"rendered":"Spring Cloud Function SPEL Expression Injection Vulnerability Alert"},"content":{"rendered":"\n

Overview<\/h2>\n\n\n\n

Recently, NSFOCUS CERT detected that Spring Cloud officially fixed a SPEL expression injection vulnerability in Spring Cloud Function, because the parameter “spring.cloud.function.routing-expression” in the request header is processed as a Spel expression by the apply method of the RoutingFunction class in Spring Cloud Function, resulting in a Spel expression injection vulnerability, which can be exploited by an attacker to remotely execute arbitrary code. At present, the vulnerability PoC has been disclosed, and relevant users are requested to take measures to protect it.<\/p>\n\n\n\n

Spring Cloud Function is a Spring Boot-based functional computing framework that abstracts all transport details and infrastructure, allowing developers to keep all familiar tools and processes and focus on business logic. NSFOCUS has successfully reproduced this vulnerability immediately:<\/p>\n\n\n\n

\"Red<\/a><\/figure>\n\n\n\n

Reference link: <\/p>\n\n\n\n

https:\/\/github.com\/spring-cloud\/spring-cloud-function\/commit\/0e89ee27b2e76138c16bcba6f4bca906c4f3744f<\/a><\/p>\n\n\n\n

Scope of Impact<\/h2>\n\n\n\n

Affected version<\/strong><\/p>\n\n\n\n