Description
In spring cloud gateway versions prior to 3.1.1+ and 3.0.7+ , applications are vulnerable to a code injection attack when the Gateway Actuator endpoint is enabled, exposed and unsecured. A remote attacker could make a maliciously crafted request that could allow arbitrary remote execution on the remote host.
Remediation
References
Related Vulnerabilities
Oracle Application Server CVE-2008-7234 Vulnerability (CVE-2008-7234)
Oracle JRE CVE-2024-21138 Vulnerability (CVE-2024-21138)
Apache Traffic Server CVE-2015-5168 Vulnerability (CVE-2015-5168)
WordPress Plugin WP RSS By Publishers Multiple SQL Injection Vulnerabilities (0.1)
WordPress Plugin Tutor LMS-eLearning and online course solution Local File Inclusion (1.8.7)