Vulnerabilities > Vmware > Spring Cloud Netflix Zuul

DATE CVE VULNERABILITY TITLE RISK
2021-02-23 CVE-2021-22113 Incorrect Authorization vulnerability in VMWare Spring Cloud Netflix Zuul 2.2.4/2.2.5/2.2.6
Applications using the “Sensitive Headers” functionality in Spring Cloud Netflix Zuul 2.2.6.RELEASE and below may be vulnerable to bypassing the “Sensitive Headers” restriction when executing requests with specially constructed URLs.
network
low complexity
vmware CWE-863
5.3