← Database

CVE-2025-41235

HIGH CVSS: 8.6 Published: 2025-05-30 Modified: 2026-06-17

Description

Spring Cloud Gateway Server forwards the X-Forwarded-For and Forwarded headers from untrusted proxies.

Affected Platforms

Unknown

Weakness Type

CWE-444

References