cbcvebase.

Spring Cloud Gateway vulnerabilities

1 known vulnerability affecting spring/cloud_gateway.

Total CVEs
1
CISA KEV
0
Public exploits
1
Exploited in wild
0
Severity breakdown
CRITICAL1

Vulnerabilities

Page 1 of 1
CVE-2025-41243P2CRITICALCVSS 10.0PoC≥ 4.3.x, < 4.3.1≥ 4.2.x, < 4.2.5+2 more2025-09-16
CVE-2025-41243 [CRITICAL] CWE-94 CVE-2025-41243: Spring Cloud Gateway Server Webflux may be vulnerable to Spring Environment property modification. Spring Cloud Gateway Server Webflux may be vulnerable to Spring Environment property modification. An application should be considered vulnerable when all the following are true: * The application is using Spring Cloud Gateway Server Webflux (Spring Cloud Gateway Server WebMVC is not vulnerable). * Spring Boot actuator is a dependency. * The Spring
nvd
Spring Cloud Gateway vulnerabilities | cvebase