CVE-2025-41235: vmware spring_cloud_gateway HTTP Request/Response Smuggling
CVSS: 8.6v3.1HighDeferred
AliasesGHSA-6j2q-c73v-97c5
Published 30-05-2025Last modified 30-05-2025
Vulnerability summary
CVE-2025-41235 is a high (CVSS 8.6) HTTP Request/Response Smuggling vulnerability in vmware spring_cloud_gateway. EPSS estimates a 0.34% chance of exploitation in the next 30 days, higher than 26.3% of scored vulnerabilities.
CVSS score
8.6/10
010
High · v3.1 (CVE.org)EPSS score
0.34%
0%100%
Low · 0.00 pp in 30 daysKEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded
Timeline
- 30-05-2025PublishedVulnerability first disclosed.
- 30-05-2025Last modifiedVulnerability information updated.
Description
Spring Cloud Gateway Server forwards the X-Forwarded-For and Forwarded headers from untrusted proxies.
CVSS metrics
3 scores · 3 sources · 1 versionHigh 8.6Preferred score · CVE.org (CNA)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:NSourcesAll 3 agree
- OSV · MavenEcosystem advisory · calculated8.6HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N
- NVDNIST8.6HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N
EPSS trend
Probability
0.34%
Chance of exploitation in the next 30 days
Percentile
26%
Versus all other CVEs
30-day change
0.00 pp
From 0.34% on 19-09-2026
19-09-202619-10-2026
EPSS score0.34%
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Org.springframework.cloud2 products
- spring-cloud-gateway-server≥ 4.2.0, < 4.2.3 | ≥ 4.1.0, < 4.1.8 | ≥ 4.0.0, ≤ 4.0.9 | < 3.1.10
- spring-cloud-gateway-server-mvc≥ 4.1.7, < 4.2.3
Vmware2 products
- spring_cloud_gateway≥ 2.2.10.RELEASE - 4.2.2, 4.3.0-{M1, M2, RC1}, < 4.3.0, 4.2.3, 4.1.8, 4.0.12, 3.1.10
- spring cloud gateway server mvc≥ 4.1.7 - 4.2.2, 4.3.0-{M1, M2, RC1}, < 4.3.0, 4.2.3, 4.1.8
2 vendors · 4 products
