This site currently shows sample data for demonstration.

Vulnerabilities

CVE-2026-47879 | BDVDB-2026-365413 Detail

SpringSpring Cloud Gateway

Description#

Spring Cloud Gateway JsonToGrpcGatewayFilterFactory allows arbitrary Spring Resource locations for defining the proto descriptor. Spring Cloud Gateway 5.0.0 - 5.0.2 Spring Cloud Gateway 4.3.0 - 4.3.5 Spring Cloud Gateway 4.0.0 - 4.2.9 Spring Cloud Gateway 3.1.13 and earlier

Impact#

Spring Cloud Gateway JsonToGrpcGatewayFilterFactory allows arbitrary Spring Resource locations for defining the proto descriptor.

Weaknesses#

  • CWE-918 Server-Side Request Forgery (SSRF)

References#

Exploit#

No public exploit known

History#

  1. Version 1Record published in the CVE List.