Moole Vulnerability Database

Find real vulnerabilities before they ship

High

CVE-2025-41235

Spring Cloud Gateway Server forwards the X-Forwarded-For and Forwarded headers from untrusted proxies.

VectorNETWORK

PublishedMay 30, 2025, 06:15

Published Bysecurity@vmware.com

Base Score

Score8.6

Package (Ecosystem)IntroducedFixedLimit

org.springframework.cloud:spring-cloud-gateway-server(Maven)4.2.04.2.3N/A

org.springframework.cloud:spring-cloud-gateway-server(Maven)4.1.04.1.8N/A

org.springframework.cloud:spring-cloud-gateway-server(Maven)4.0.0N/AN/A

org.springframework.cloud:spring-cloud-gateway-server(Maven)03.1.10N/A

org.springframework.cloud:spring-cloud-gateway-server-mvc(Maven)4.1.74.2.3N/A

CWE-444

Base Score

8.6

Vector String

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N

Base SeverityHigh

Version

3.1

Attack Vector (AV)

NETWORK