GHSA-q2cj-h8fw-q4cc

Suggest an improvement
Source
https://github.com/advisories/GHSA-q2cj-h8fw-q4cc
Import Source
https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2025/09/GHSA-q2cj-h8fw-q4cc/GHSA-q2cj-h8fw-q4cc.json
JSON Data
https://api.osv.dev/v1/vulns/GHSA-q2cj-h8fw-q4cc
Aliases
  • CVE-2025-41243
Published
2025-09-16T15:32:37Z
Modified
2025-09-16T20:42:27Z
Severity
  • 10.0 (Critical) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H CVSS Calculator
Summary
Spring Expression language property modification using Spring Cloud Gateway Server WebFlux
Details

Spring Cloud Gateway Server Webflux may be vulnerable to Spring Environment property modification.

An application should be considered vulnerable when all the following are true:

  • The application is using Spring Cloud Gateway Server Webflux (Spring Cloud Gateway Server WebMVC is not vulnerable).
  • Spring Boot actuator is a dependency.
  • The Spring Cloud Gateway Server Webflux actuator web endpoint is enabled via management.endpoints.web.exposure.include=gateway.
  • The actuator endpoints are available to attackers.
  • The actuator endpoints are unsecured.
Database specific 
{
    "cwe_ids":  [
        "CWE-94"
    ],
    "github_reviewed":  true,
    "github_reviewed_at":  "2025-09-16T20:20:00Z",
    "nvd_published_at":  "2025-09-16T15:15:44Z",
    "severity":  "CRITICAL"
}
References

Affected packages

Maven
org.springframework.cloud:spring-cloud-gateway-server-webflux

Package

Name
org.springframework.cloud:spring-cloud-gateway-server-webflux
View open source insights on deps.dev
Purl
pkg:maven/org.springframework.cloud/spring-cloud-gateway-server-webflux

Affected ranges

Type
ECOSYSTEM
Events
Introduced
3.1.0
Last Affected
3.1.10

Database specific

source 
"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2025/09/GHSA-q2cj-h8fw-q4cc/GHSA-q2cj-h8fw-q4cc.json"
org.springframework.cloud:spring-cloud-gateway-server-webflux

Package

Name
org.springframework.cloud:spring-cloud-gateway-server-webflux
View open source insights on deps.dev
Purl
pkg:maven/org.springframework.cloud/spring-cloud-gateway-server-webflux

Affected ranges

Type
ECOSYSTEM
Events
Introduced
4.0.0
Last Affected
4.1.10

Database specific

source 
"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2025/09/GHSA-q2cj-h8fw-q4cc/GHSA-q2cj-h8fw-q4cc.json"
org.springframework.cloud:spring-cloud-gateway-server-webflux

Package

Name
org.springframework.cloud:spring-cloud-gateway-server-webflux
View open source insights on deps.dev
Purl
pkg:maven/org.springframework.cloud/spring-cloud-gateway-server-webflux

Affected ranges

Type
ECOSYSTEM
Events
Introduced
4.2.0
Fixed
4.2.5

Database specific

source 
"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2025/09/GHSA-q2cj-h8fw-q4cc/GHSA-q2cj-h8fw-q4cc.json"
org.springframework.cloud:spring-cloud-gateway-server-webflux

Package

Name
org.springframework.cloud:spring-cloud-gateway-server-webflux
View open source insights on deps.dev
Purl
pkg:maven/org.springframework.cloud/spring-cloud-gateway-server-webflux

Affected ranges

Type
ECOSYSTEM
Events
Introduced
4.3.0
Fixed
4.3.1

Affected versions

4.*
4.3.0

Database specific

source 
"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2025/09/GHSA-q2cj-h8fw-q4cc/GHSA-q2cj-h8fw-q4cc.json"