CVE-2021-22051 Vulnerability Details

  /     /     /  

CVE-2021-22051 Metadata Quick Info

CVE Published: 08/11/2021 | CVE Updated: 03/08/2024 | CVE Year: 2021
Source: vmware | Vendor: n/a | Product: Spring Cloud Gateway
Status : PUBLISHED

---

CVE-2021-22051 Description

Applications using Spring Cloud Gateway are vulnerable to specifically crafted requests that could make an extra request on downstream services. Users of affected versions should apply the following mitigation: 3.0.x users should upgrade to 3.0.5+, 2.2.x users should upgrade to 2.2.10.RELEASE or newer.

Metrics

CVSS Version: 3.1 | Base Score: n/a
Vector: n/a

l➤ Exploitability Metrics:
    Attack Vector (AV)*
    Attack Complexity (AC)*
    Privileges Required (PR)*
    User Interaction (UI)*
    Scope (S)*

l➤ Impact Metrics:
    Confidentiality Impact (C)*
    Integrity Impact (I)*
    Availability Impact (A)*

Weakness Enumeration (CWE)

CWE-ID:
CWE Name: Specifically crafted requests could make an extra request on downstream services.
Source: n/a

Common Attack Pattern Enumeration and Classification (CAPEC)

CAPEC-ID:
CAPEC Description:


Source: NVD (National Vulnerability Database).