PT-2025-36574 · Vmware · Spring Cloud Gateway

Ezzer17 · Published 2025-04-16 · Updated 2025-12-30 · CVE-2025-41243

Positive Technologies (AI Summary)

CVSS v3.1

10

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Spring Cloud Gateway Server Webflux (affected versions not specified)

Description Spring Cloud Gateway Server Webflux may allow an attacker to modify Spring Environment properties. This is possible when the Spring Boot actuator is a dependency, the Spring Cloud Gateway Server Webflux actuator web endpoint is enabled via management.endpoints.web.exposure.include=gateway, the actuator endpoints are accessible to attackers, and the actuator endpoints are not secured. Successful exploitation can lead to property modification within the route context, potentially enabling Server-Side Request Forgery (SSRF) and Remote File Inclusion (RFI) attacks, allowing access to sensitive information and file system access. The issue stems from Spring Expression Language (SpEL) evaluation context complications.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Code Injection

Weakness Enumeration

CWE-917

CWE-94

Related Identifiers

BDU:2025-13429

CVE-2025-41243

GHSA-Q2CJ-H8FW-Q4CC

Affected Products

Spring Cloud Gateway

References · 34

• https://nvd.nist.gov/vuln/detail/CVE-2025-41243 · Security Note
• https://bdu.fstec.ru/vul/2025-13429 · Security Note
• https://osv.dev/vulnerability/GHSA-q2cj-h8fw-q4cc · Vendor Advisory
• https://twitter.com/the_yellow_fall/status/1965226414783050080 · Twitter Post
• https://twitter.com/warthogtk/status/1976757980746952890 · Twitter Post
• https://securityonline.info/cve-2025-41243-cvss-10-critical-spring-cloud-gateway-server-webflux-flaw-exposes-property-modification-risk · Note
• https://twitter.com/CveFindCom/status/1967969069350404435 · Twitter Post
• https://twitter.com/samilaiho/status/1970400458909860190 · Twitter Post
• https://twitter.com/ez_z3r/status/1973291474453405726 · Twitter Post
• https://twitter.com/psytester1/status/1973265212829839479 · Twitter Post
• https://spring.io/security/cve-2025-41243 · Note
• https://twitter.com/Iambivash007/status/1965302712482046274 · Twitter Post
• https://twitter.com/ksg93rd/status/1977042222865649739 · Twitter Post
• https://twitter.com/CCBalert/status/1968334693880741908 · Twitter Post
• https://reddit.com/r/CVEWatch/comments/1nrrggp/top_10_trending_cves_27092025 · Reddit Post