CVE-2025-41235 CVE-2025-41235: Spring Cloud Gateway Server Forwards Headers from Untrusted Proxies

🗓️ 30 May 2025 05:57:16Reported by vmwareType

Spring Cloud Gateway may forward unsafe headers from untrusted proxies, causing security risks.

Reporter	Title	Published	Views	Family All 29
IBM Security Bulletins	Security Bulletin: Multiple Security Vulnerabilities in IBM Sterling Partner Engagement Manager	16 Dec 202507:00	–	ibm
IBM Security Bulletins	Security Bulletin: IBM watsonx Orchestrate Cartridge affected by vulnerability in spring-cloud-starter-gateway-4.1.7.jar	27 Aug 202502:48	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Security Vulnerabilities in IBM Sterling Partner Engagement Manager	16 Dec 202505:55	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Spring Cloud Gateway Server, Bouncy Castle, Reactor Netty HTTP Server, NPM and Apache Commons might affect IBM Storage Defender Copy Data Management	30 Sep 202521:12	–	ibm
IBM Security Bulletins	Security Bulletin: Security Vulnerability in Spring Cloud Affects IBM Sterling B2B Integrator and IBM Sterling File Gateway (CVE-2025-41235)	12 Jun 202619:02	–	ibm
Circl	CVE-2025-41235	30 May 202506:50	–	circl
CNNVD	Broadcom Spring Cloud Gateway Server 环境问题漏洞	30 May 202500:00	–	cnnvd
CVE	CVE-2025-41235	30 May 202505:57	–	cve
EUVD	EUVD-2025-16457	3 Oct 202520:07	–	euvd
Github Security Blog	Spring Cloud Gateway Server Forwards Headers from Untrusted Proxies	30 May 202506:30	–	github

[
  {
    "defaultStatus": "affected",
    "packageName": "Spring cloud Gateway",
    "platforms": [
      "Any"
    ],
    "product": "Spring cloud Gateway",
    "vendor": "VMware",
    "versions": [
      {
        "lessThan": "4.3.0, 4.2.3, 4.1.8, 4.0.12, 3.1.10",
        "status": "affected",
        "version": "2.2.10.RELEASE - 4.2.2, 4.3.0-{M1, M2, RC1}",
        "versionType": "oss, commercial"
      }
    ]
  },
  {
    "defaultStatus": "affected",
    "packageName": "Spring cloud Gateway Server MVC",
    "platforms": [
      "Any"
    ],
    "product": "Spring Cloud Gateway Server MVC",
    "vendor": "VMware",
    "versions": [
      {
        "lessThan": "4.3.0, 4.2.3, 4.1.8",
        "status": "affected",
        "version": "4.1.7 - 4.2.2, 4.3.0-{M1, M2, RC1}",
        "versionType": "OSS"
      }
    ]
  }
]

Source	Link
spring	www.spring.io/security/cve-2025-41235

30 May 2025 05:57Current

CVSS 3.18.6

EPSS0.00394