Skip to content
Sign in
Not rated

CVE-2021-22051 Applications using Spring Cloud Gateway are vulnerable to specifically crafted requests that could make an extra request…

Description

Applications using Spring Cloud Gateway are vulnerable to specifically crafted requests that could make an extra request on downstream services. Users of affected versions should apply the following mitigation: 3.0.x users should upgrade to 3.0.5+, 2.2.x users should upgrade to 2.2.10.RELEASE or newer.

Affected products and versions

Product Affected versions Fixed in
Spring Cloud Gateway Versions not published

Other CVEs of Spring Cloud Gateway

The 3 CVEs of Spring Cloud Gateway →
CVE-2022-22946 In spring cloud gateway versions prior to 3.1.1+ , applications that are configured to enable HTTP2 and no key store… Not rated CVE-2022-22947 VMware Spring Cloud Gateway Code Injection Vulnerability 10.0 Critical
Track this CVE