Spring Cloud Gateway: API Gateway for Spring
Spring Cloud Gateway is an API gateway built on Spring WebFlux. CVE-2022-22947 affects it when the Actuator endpoint is exposed.
Tag: Spring Cloud Gateway
CVE-2022-22947: Spring Cloud Gateway Actuator RCE
CVE-2022-22947 is a remote code execution vulnerability in Spring Cloud Gateway that occurs when the Actuator endpoint is enabled and exposed unsecured.
NadMesh Botnet Targets Exposed AI Services for Cloud Credentials and Kubernetes Tokens
A new Go-based botnet named NadMesh has been discovered actively hunting exposed AI services to steal cloud credentials and Kubernetes tokens. First…