Nepxion Discovery is a solution for Spring Cloud. Discovery is vulnerable to a potential Server-Side Request Forgery (SSRF). RouterResourceImpl uses RestTemplate’s getForEntity to retrieve the contents of a URL containing user-controlled input, potentially resulting in Information Disclosure. There is no patch available for this issue at time of publication. There are no known workarounds.
| Package (Ecosystem) | Introduced | Fixed | Limit |
|---|---|---|---|
| com.nepxion:discovery(Maven) | 0 | N/A | N/A |
CVSS Metrics
