CVE-2024-22263

Spring Cloud Data Flow is a microservices-based Streaming and Batch data processing in Cloud Foundry and Kubernetes. The Skipper server has the ability to receive upload package requests. However, due to improper sanitization for upload path, a malicious user who has access to skipper server api can use a crafted upload request to write arbitrary file to any location on file system, may even compromises the server.

• CWE-434

• https://spring.io/security/cve-2024-22263
• https://spring.io/security/cve-2024-22263

Published

Jun 19, 2024

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-22258Spring Authorization Server versions 1.0.0 - 1.0.5, 1.1.0 - …6.1
• CVE-2024-22259Applications that use UriComponentsBuilder in Spring Framewo…8.1
• CVE-2024-2226The Otter Blocks – Gutenberg Blocks, Page Builder for Gutenb…5.4
• CVE-2024-22260VMware Workspace One UEM update addresses an information exp…6.8
• CVE-2024-22261SQL-Injection in Harbor allows priviledge users to leak the …5.5
• CVE-2024-22262Applications that use UriComponentsBuilder to parse an exter…8.1
• CVE-2024-22264VMware Avi Load Balancer contains a privilege escalation vul…7.2
• CVE-2024-22266 VMware Avi Load Balancer contains an information disclosure…6.5
• CVE-2024-22267VMware Workstation and Fusion contain a use-after-free vulne…8.2
• CVE-2024-22268VMware Workstation and Fusion contain a heap buffer-overflow…6.5
• CVE-2024-22269VMware Workstation and Fusion contain an information disclos…6
• CVE-2024-2227This vulnerability allows access to arbitrary files in the a…7.5