CVE-2025-41235
HIGH8.6EPSS 0.39%Spring Cloud Gateway Server Forwards Headers from Untrusted Proxies
發布日:2025/5/30修改日:2025/7/28
描述
Spring Cloud Gateway Server forwards the X-Forwarded-For and Forwarded headers from untrusted proxies.
受影響套件(2)
- Maven/org.springframework.cloud:spring-cloud-gateway-server>= 4.2.0, < 4.2.3
- Maven/org.springframework.cloud:spring-cloud-gateway-server-mvc>= 4.1.7, < 4.2.3
CVSS 分數
| 來源 | 版本 | 嚴重程度 | 向量 |
|---|---|---|---|
| osv | CVSS 3.1 | HIGH8.6 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N |