CVE-2021-22051

Description

Applications using Spring Cloud Gateway are vulnerable to specifically crafted requests that could make an extra request on downstream services. Users of affected versions should apply the following mitigation: 3.0.x users should upgrade to 3.0.5+, 2.2.x users should upgrade to 2.2.10.RELEASE or newer.

Risk Information

Base Score

6.5

MODERATE

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

EPSS Score

Exploitation Probability

0.135

Associated Vulnerability

Vulnerability	OS Platform
Vulnerabilities CVE-2021-22051 are fixed in spring-cloud-gateway 0.5	Windows
Vulnerabilities CVE-2021-22051 are fixed in spring-cloud-gateway 3.0.5	Windows
Vulnerabilities CVE-2021-22051 are fixed in spring-cloud-gateway for Linux 0.5	Linux
Vulnerabilities CVE-2021-22051 are fixed in spring-cloud-gateway for Linux 3.0.5	Linux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234