---
title: "CX-2022-5010"
date: "2022-06-17T07:00:00+00:00"
url: "https://checkmarx.com/zero/vulnerabilities/cx-2022-5010/"
---

# CX-2022-5010

[Disclosed vulnerabilities](https://checkmarx.com/zero/vulnerabilities/)

Fixed: Jun 13, 2022

No CVE assigned  **Published:** Jun 17, 2022

6.5 Medium Severity function JAVA

YN Yaniv Nizry  Reported by Checkmarx Zero

Details Overview

## Summary

In Spring Cloud Function it’s possible for users to invoke unintended functions that follow some arbitrary rules. In versions 3.2.6 and above a `spring.cloud.function.ineligible-definitions` configuration was introduced to mitigate the issue but it still requires the user to go over the unintended functions a user might run.

## Product

Spring Cloud Function versions before 3.2.6.

## Impact

The impact is highly dependent on the application context, and on the worse case could lead to RCE.

## Steps to reproduce

1. Run the following main function:

    ```

    public static void main(String[] args) {
         Collection registeredBeans = new ArrayList<String>();
         ApplicationContext context = SpringApplication.run(DemoApplication.class, args);
         FunctionCatalog catalog = context.getBean(FunctionCatalog.class);
         System.out.println("Num of Beans: " + context.getBeanDefinitionNames().length);
         for (String functionName : context.getBeanDefinitionNames())
         {
             try
             {
                 SimpleFunctionRegistry.FunctionInvocationWrapper function = (SimpleFunctionRegistry.FunctionInvocationWrapper)catalog.lookup(functionName);
                 if (function != null)
                 {
                     registeredBeans.add(functionName);
                 }
             }
             catch (Exception e)
             {
             }
         }
         System.out.println("Num of registered functions: " + registeredBeans.size());
         System.out.println(registeredBeans);
    }
    ```

```

2. The output will list all of the functions a user can call, there will be more than the application's intention.

### Expected result:
Unintended functions could be executed, the impact could vary.
```

## Remediation

Update Spring Cloud Function to 3.2.6 or above, and use the configuration spring.cloud.function.ineligible-definitions to exclude unintended functions.

## Credit

This issue was discovered and reported by Checkmarx SCA Security Researcher [Yaniv Nizry](https://twitter.com/ynizry).

## Resources

1. [Commit](https://github.com/spring-cloud/spring-cloud-function/commit/1381cd4e6d04961d028683d2226242c01d7397ab)

0  Medium Severity CVSS v3.1 Score

   6.5

CVSS v3.1 Vectors- Attack Vector: Network
- Attack Complexity: High
- Privileges Required: None
- User Interaction: None
- Scope: Changed
- Confidentiality Impact: Low
- Integrity Impact: Low
- Availability Impact: Low

Advisory Timeline1. Disclosed Jun 2, 2022 Notified the maintainer
2. Fixed Jun 13, 2022 Issue acknowledged

## Explore more findings

[27 Nov 2025 CVE-2025-34281  Stored Cross-Site Scripting (XSS) in ThingsBoard   6.2  Visit the page](https://checkmarx.com/zero/vulnerabilities/cve-2025-34281/) [17 Jan 2025 CVE-2025-0825  HTTP Response Splitting in cpp-httplib   6.9  Visit the page](https://checkmarx.com/zero/vulnerabilities/cve-2025-0825/) [17 Jun 2025 CVE-2025-6050  Stored Cross-Site Scripting (XSS) in Mezzanine CMS Admin Interface   4.8  Visit the page](https://checkmarx.com/zero/vulnerabilities/cve-2025-6050/) [12 Dec 2024 CVE-2024-8374  Code Injection in UltiMaker Cura   7.8  Visit the page](https://checkmarx.com/zero/vulnerabilities/cve-2024-8374/) [14 Nov 2024 CVE-2024-52526  Stored Cross-site Scripting in @LibreNMS/LibreNMS Services Tab   7.5  Visit the page](https://checkmarx.com/zero/vulnerabilities/cve-2024-52526/) [14 Nov 2024 CVE-2024-51497  Stored Cross-site Scripting in @LibreNMS/LibreNMS Custom OID Tab   7.5  Visit the page](https://checkmarx.com/zero/vulnerabilities/cve-2024-51497/) [14 Nov 2024 CVE-2024-51496  Reflected Cross-site Scripting in @LibreNMS/LibreNMS /wireless and /health endpoints   7.5  Visit the page](https://checkmarx.com/zero/vulnerabilities/cve-2024-51496/) [  14 Nov 2024 CVE-2024-51495  Stored Cross-site Scripting in @LibreNMS/LibreNMS Device Overview `overwrite\_ip` Field   7.5  Visit the page ](https://checkmarx.com/zero/vulnerabilities/cve-2024-51495/) [14 Nov 2024 CVE-2024-51494  Stored Cross-site Scripting in @LibreNMS/LibreNMS Port Settings   7.5  Visit the page](https://checkmarx.com/zero/vulnerabilities/cve-2024-51494/) [14 Nov 2024 CVE-2024-50352  Stored Cross-site Scripting in @LibreNMS/LibreNMS Services Section of Device Overview   7.5  Visit the page](https://checkmarx.com/zero/vulnerabilities/cve-2024-50352/) [14 Nov 2024 CVE-2024-50351  Reflected Cross-site Scripting in @LibreNMS/LibreNMS Logs Tab   7.5  Visit the page](https://checkmarx.com/zero/vulnerabilities/cve-2024-50351/) [14 Nov 2024 CVE-2024-50350  Stored Cross-site Scripting in @LibreNMS/LibreNMS Port Settings Port Group   7.5  Visit the page](https://checkmarx.com/zero/vulnerabilities/cve-2024-50350/)