Description
In spring cloud gateway versions prior to 3.1.1+ and 3.0.7+ , applications are vulnerable to a code injection attack when the Gateway Actuator endpoint is enabled, exposed and unsecured. A remote attacker could make a maliciously crafted request that could allow arbitrary remote execution on the remote host.
Affected Platforms
Oracle Communications Cloud Native Core ConsoleOracle Communications Cloud Native Core Network Function Cloud Native EnvironmentOracle Communications Cloud Native Core Network Repository FunctionOracle Communications Cloud Native Core Security Edge Protection ProxyOracle Communications Cloud Native Core Service Communication ProxyOracle Communications Cloud Native Core Network Slice Selection FunctionVmware Spring Cloud GatewayOracle Communications Cloud Native Core Network Exposure FunctionOracle Commerce Guided SearchOracle Communications Cloud Native Core Binding Support Function