391 matches found
CVE-2025-41253 Spring Cloud Gateway Webflux SpEL Injection Vulnerability Allowing Exposure of Environment Variables
The following versions of Spring Cloud Gateway Server Webflux may be vulnerable to the ability to expose environment variables and system properties to attackers. An application should be considered vulnerable when all the following are true: The application is using Spring Cloud Gateway Server...
CVE-2025-41253
The following versions of Spring Cloud Gateway Server Webflux may be vulnerable to the ability to expose environment variables and system properties to attackers. An application should be considered vulnerable when all the following are true: The application is using Spring Cloud Gateway Server...
Spring Cloud Gateway Server Webflux security vulnerability
Spring Cloud Gateway Server Webflux is a Spring open source gateway server. A security vulnerability exists in Spring Cloud Gateway Server Webflux that stems from the Spring Expression Language that may expose environment variables and system properties, potentially leading to information...
CVE-2025-41253: Improper Neutralization of Special Elements used in an Expression Language Statement
The following versions of Spring Cloud Gateway Server Webflux may be vulnerable to the ability to expose environment variables and system properties to attackers. An application should be considered vulnerable when all the following are true: The application is using Spring Cloud Gateway Server...
io.minio/minio: minio-java Client XML Tag is Vulnerable to Value Substitution
In minio-java versions prior to 8.6.0, XML tag values containing references to system properties or environment variables were automatically substituted with their actual values during processing. This unintended behavior could lead to the exposure of sensitive information, including credentials,...
XML Injection
io.minio:minio is vulnerable to XML Injection. The vulnerability is due to automatic substitution of XML tag values containing system property or environment variable references during processing, which allows an attacker to craft malicious XML input that exposes sensitive information such as...
EUVD-2019-6355
Malware in sbrugna...
EUVD-2019-6373
Malware in sbrugna...
EUVD-2018-6884
Malware in sbrugna...
EUVD-2019-6432
Malware in sbrugna...
EUVD-2019-6357
Malware in sbrugna...
EUVD-2019-6353
Malware in sbrugna...
EUVD-2019-6431
Malware in sbrugna...
EUVD-2019-6367
Malware in sbrugna...
EUVD-2018-6886
Malware in sbrugna...
EUVD-2010-3839
Malware in sbrugna...
EUVD-2010-4440
Malware in sbrugna...
EUVD-2021-26015
Malware in sbrugna...