8.6
High
CVE-2025-41235 Spring Cloud Gateway Server forwards the X-Forwarded-For and Forwarded headers from untrusted proxies
Description
Spring Cloud Gateway Server forwards the X-Forwarded-For and Forwarded headers from untrusted proxies.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Spring cloud Gateway | Versions not published | |
| Spring Cloud Gateway Server MVC | Versions not published |