Description
Applications using Spring Cloud Gateway are vulnerable to specifically crafted requests that could make an extra request on downstream services. Users of affected versions should apply the following mitigation: 3.0.x users should upgrade to 3.0.5+, 2.2.x users should upgrade to 2.2.10.RELEASE or newer.
Remediation
References
Related Vulnerabilities
MySQL CVE-2021-2042 Vulnerability (CVE-2021-2042)
Sqlite Use After Free Vulnerability (CVE-2026-51296)
Joomla Use of Cache Containing Sensitive Information Vulnerability (CVE-2026-48901)
MyBB Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2010-4625)
WordPress Plugin Woocommerce Products Price Bulk Edit Cross-Site Scripting (2.2.0)