Description (CNA)
In Spring Cloud OpenFeign 3.0.0 to 3.0.4, 2.2.0.RELEASE to 2.2.9.RELEASE, and older unsupported versions, applications using type-level `@RequestMapping`annotations over Feign client interfaces, can be involuntarily exposing endpoints corresponding to `@RequestMapping`-annotated interface methods.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / Spring Cloud OpenFeign | affected Spring Cloud OpenFeign versions 3.0.x prior to 3.0.5+, 2.2.x prior to 2.2.10. RELEASE+ and all older unsupported versions are impacted. |
CWE
CWE-200
References
ADP enrichment
No English description supplied.