GHSA-q2cj-h8fw-q4ccCriticalCVSS 10.0

Spring Expression language property modification using Spring Cloud Gateway Server WebFlux

Published
September 16, 2025
Last Modified
September 16, 2025

🔗 CVE IDs covered (1)

CVE-2025-41243 →

📋 Description

Spring Cloud Gateway Server Webflux may be vulnerable to Spring Environment property modification.

An application should be considered vulnerable when all the following are true:

  • The application is using Spring Cloud Gateway Server Webflux (Spring Cloud Gateway Server WebMVC is not vulnerable).
  • Spring Boot actuator is a dependency.
  • The Spring Cloud Gateway Server Webflux actuator web endpoint is enabled via management.endpoints.web.exposure.include=gateway.
  • The actuator endpoints are available to attackers.
  • The actuator endpoints are unsecured.

🎯 Affected products4

  • maven/org.springframework.cloud:spring-cloud-gateway-server-webflux:>= 3.1.0, <= 3.1.10
  • maven/org.springframework.cloud:spring-cloud-gateway-server-webflux:>= 4.0.0, <= 4.1.10
  • maven/org.springframework.cloud:spring-cloud-gateway-server-webflux:>= 4.2.0, < 4.2.5
  • maven/org.springframework.cloud:spring-cloud-gateway-server-webflux:>= 4.3.0, < 4.3.1

🔗 References (3)