Web Framework

Spring Cloud Gateway

Spring Cloud Gateway provides a libraries for building an API Gateway on top of Spring WebFlux or Spring WebMVC. Spring Cloud Gateway aims to provide a simple yet effective way to route to APIs and provide cross cutting concerns to them such as: security monitoring/metrics and resiliency.

Official Site:

https://spring.io/projects/spring-cloud-gateway

Severity Summary:

Critical: 1 Medium: 2

Reference

Title

Severity

CVE-2022-22947

Spring Cloud Gateway Improper Neutralization of Special Elements used in an Expression Language Statement (Expression La Vulnerability

Critical

CVE-2022-22946

Spring Cloud Gateway Improper Certificate Validation Vulnerability

Medium

CVE-2021-22051

Spring Cloud Gateway Incorrect Authorization Vulnerability

Medium