CVE-2022-22963-Spring-SpEL-RCE.yml

name: poc-yaml-CVE-2022-22963-Spring-SpEL-RCE
rules:
  - method: POST
    path: /functionRouter
    body: test
    headers:
      Content-Type: application/x-www-form-urlencoded
    expression: |
      response.status == 500 && response.body.bcontains(b'Internal Server Error')
detail:
  author: mamba
  description: "CVE-2022-22963-Spring-SpEL-RCE by chaosec公众号"
  links:
    - https://github.com/chaosec2021