Product
Spring Cloud Gateway
- First Reported
- Dec 16, 2024
- Latest Reported
- Sep 19, 2025
Reported Context (2)
- The abuse path (part 2): When Spring Cloud Gateway is enabled, the /actuator/gateway endpoint allows creating new routes. How Common Cloud Misconfigurations Can Lead to Code Execution and Data Exposure
- Spring Boot applications using Spring Cloud Gateway versions 3.1.0, 3.0.0 to 3.0.6, and older unsupported versions are vulnerable to remote code execution (CVE-2022-22947). Spring Boot Actuator Misconfigurations Can Expose Secrets and Enable RCE
CVE (1)
Threat Actors (1)
MITRE ATT&CK (4)
Vendors (2)
Products (6)
Tools (2)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.