Skip to content

Product

org.springframework.cloud/spring-cloud-netflix-zuul vulnerabilities

1 published CVE affecting org.springframework.cloud/spring-cloud-netflix-zuul, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
1
Critical
0
High
0
Medium
1
Low
0
Unscored
0
CISA KEV
0

Latest org.springframework.cloud/spring-cloud-netflix-zuul CVEs

Newest publication first

  1. CVE-2021-22113 Incorrect Authorization in Spring Cloud Netflix Zuul

    Published
    MediumCVSS 5.3 EPSS 0.85%

    Applications using the “Sensitive Headers” functionality in Spring Cloud Netflix Zuul 2.2.6.RELEASE and below may be vulnerable to bypassing the “Sensitive Headers” restriction when executing requests with specially constructed URLs. Applications that use Spring Security's Strict...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.