CVE-2025-41235
Header Injection Vulnerability in Spring Cloud Gateway Server

Publication date: 2025-05-30

Last updated on: 2025-05-30

Assigner: [email protected]

Description
Spring Cloud Gateway Server forwards the X-Forwarded-For and Forwarded headers from untrusted proxies.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Affected Vendors & Products
Vendor Product Version
spring cloud_gateway_server_mvc *
spring cloud_gateway_server *
spring cloud_gateway_server_mvc *
spring cloud_gateway_server_mvc *
spring cloud_gateway_server *
spring cloud_gateway_server *
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-444 Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')
AI Powered Q&A
Can you explain this vulnerability to me?


How can this vulnerability impact me? :


What immediate steps should I take to mitigate this vulnerability?


Ask Our AI Assistant
Need more information? Ask your question to get an AI reply (Powered by our expertise)
0/70
Meta Information
CVE Publication Date:
2025-05-30
CVE Last Modified Date:
2025-05-30
Report Generation Date:
2025-06-08
AI Powered Q&A Generation:
2025-05-30
EPSS Last Evaluated Date:
2025-06-03
NVD Report Link: