Back

HIGH

CVE-2025-41235: Spring Cloud Gateway Server Forwards Headers from Untrusted Proxies

Published May 30, 2025

Description

Spring Cloud Gateway Server forwards the X-Forwarded-For and Forwarded headers from untrusted proxies.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

References (4)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner vmware
Published May 30, 2025
Updated May 30, 2025
Reserved Apr 16, 2025
CISA Vulnrichment
Updated May 30, 2025
NVD
Status Deferred
Modified Jun 17, 2026
Red Hat
Severity n/a
Public date n/a
ENISA EUVD
Assigner vmware
Published May 30, 2025
Updated May 30, 2025
Exploited since n/a
EUVD-2025-16457 GHSA-6J2Q-C73V-97C5