CVE Intelligence

Maven Org.springframework.cloud:spring-cloud-gateway vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Maven Org.springframework.cloud:spring-cloud-gateway: 1 record(s), with affected versions and fixes.

CVE-2022-22947 Critical · 10.0 KEV Urgent · 83 Public exploit CWE-917 Mar 3, 2022
VMware Spring Cloud Gateway Code Injection Vulnerability
In spring cloud gateway versions prior to 3.1.1+ and 3.0.7+ , applications are vulnerable to a code injection attack when the Gateway Actuator endpoint is enabled, exposed and unsecured. A remote attacker could make a maliciously crafted request that could allow arbitrary remote execution on the remote host.