SERVER-WEBAPP VMware Spring Cloud Data Flow directory traversal attempt

IPS-NPA

1 SID: 66280

Description

Detects an attempt to exploit CVE-2024-22263, a directory traversal flaw that can read or write files outside the intended paths in VMware Spring Cloud Data Flow.

CVEs

Related blogs

$Sandbox process tree for the Underground loader, showing an injected dllhost.exe launching chrome.exe and msedge.exe and staging stolen cookies under C:\ProgramData\Underground, before a second dllhost.exe deletes that folder.$

$100k in Crypto Drained by the Underground Operation

October 1, 20268 min read

The Future of Malware is LLM-powered

The Future of Malware is LLM-powered

November 20, 20255 min read

New Evasive Campaign Delivers LegionLoader via Fake CAPTCHA & CloudFlare Turnstile

New Evasive Campaign Delivers LegionLoader via Fake CAPTCHA & CloudFlare Turnstile

April 4, 20258 min read

Threat Labs News Roundup: May 2023

June 9, 20234 min read

Netskope Threat Labs Stats for March 2023

Netskope Threat Labs Stats for March 2023

April 21, 20235 min read

Threat Labs News Roundup: February 2023

March 7, 20234 min read

Two RCE Vulnerabilities Found in Spring Framework

Two RCE Vulnerabilities Found in Spring Framework

April 6, 20222 min read

New Formbook Campaign Delivered Through Phishing Emails

New Formbook Campaign Delivered Through Phishing Emails

March 11, 20229 min read

Netskope Threat Coverage: 2020 Tokyo Olympics Wiper Malware

Netskope Threat Coverage: 2020 Tokyo Olympics Wiper Malware

July 29, 20214 min read

Targeted Attack BadWolf Exploits Office Vulnerabilities to Exfiltrate Data

Targeted Attack BadWolf Exploits Office Vulnerabilities to Exfiltrate Data

December 14, 20175 min read