Home

Description

Spring Cloud Gateway Server Webflux may be vulnerable to Spring Environment property modification. An application should be considered vulnerable when all the following are true: * The application is using Spring Cloud Gateway Server Webflux (Spring Cloud Gateway Server WebMVC is not vulnerable). * Spring Boot actuator is a dependency. * The Spring Cloud Gateway Server Webflux actuator web endpoint is enabled via management.endpoints.web.exposure.include=gateway. * The actuator endpoints are available to attackers. * The actuator endpoints are unsecured.

PUBLISHED Reserved 2025-04-16 | Published 2025-09-16 | Updated 2025-09-17 | Assigner vmware




CRITICAL: 10.0CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Problem types

CWE-917 Improper Neutralization of Special Elements used in an Expression Language Statement ('Expression Language Injection')

CWE-94 Improper Control of Generation of Code ('Code Injection')

Product status

Default status
unaffected

4.3.x (custom) before 4.3.1
affected

4.2.x (custom) before 4.2.5
affected

4.1.x, 4.0.x (custom) before 4.1.11
affected

3.1.x (custom) before 3.1.11
affected

References

spring.io/security/cve-2025-41243

cve.org (CVE-2025-41243)

nvd.nist.gov (CVE-2025-41243)

Download JSON