CVE-2021-22051: Incorrect Authorization

November 10, 2021

Applications using Spring Cloud Gateway are vulnerable to specifically crafted requests that could make an extra request on downstream services. Users of affected versions should apply the following mitigation: 3.0.x users should upgrade to 3.0.5+, 2.2.x users should upgrade to 2.2.10.RELEASE or newer.

References

github.com/advisories/GHSA-2r2v-q399-qq93
nvd.nist.gov/vuln/detail/CVE-2021-22051
tanzu.vmware.com/security/cve-2021-22051

Code Behaviors & Features

Detect and mitigate CVE-2021-22051 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →