CVE-2021-22051: Incorrect Authorization

Applications using Spring Cloud Gateway are vulnerable to specifically crafted requests that could make an extra request on downstream services. Users of affected versions should apply the following mitigation: 3.0.x users should upgrade to 3.0.5+, 2.2.x users should upgrade to 2.2.10.RELEASE or...

PT-2021-14847

Name of the Vulnerable Software and Affected Versions Spring Cloud Gateway versions 3.0.0 through 3.0.4 Spring Cloud Gateway versions 2.2.0 through 2.2.9 Description Applications using Spring Cloud Gateway are vulnerable to specifically crafted requests that could make an extra request on...

Spring Cloud Gateway Request Vulnerability

Applications using Spring Cloud Gateway are vulnerable to specifically crafted requests that could make an extra request on downstream services...

PT-2022-1950

Name of the Vulnerable Software and Affected Versions Apache HTTP Server versions 2.4.47-alt1 through 2.4.57-alt2 Spring Cloud Gateway versions prior to 3.1.1+ and 3.0.7+ Description The Apache HTTP Server is affected by HTTP request splitting with mod rewrite and mod proxy CVE-2023-25690...