← CVE Intelligence

CVE-2025-41235

CVE-2025-41235: Spring Cloud Gateway Server Forwards Headers from Untrusted Proxies PUBLISHED

Description (CNA)

Spring Cloud Gateway Server forwards the X-Forwarded-For and Forwarded headers from untrusted proxies.

Affected (CNA)

Vendor / productVersions
VMware / Spring cloud Gatewayaffected 2.2.10.RELEASE - 4.2.2, 4.3.0-{M1, M2, RC1} before 4.3.0, 4.2.3, 4.1.8, 4.0.12, 3.1.10
VMware / Spring Cloud Gateway Server MVCaffected 4.1.7 - 4.2.2, 4.3.0-{M1, M2, RC1} before 4.3.0, 4.2.3, 4.1.8

CWE

No CWE identifiers supplied.

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.