CVE-2021-22044CWE-200

In Spring Cloud OpenFeign 3.0.0 to 3.0.4, 2.2.0.RELEASE to 2.2.9.RELEASE, and older unsupported versions, applications using type-level…

published October 28, 2021

CVSS
—
EPSS
1%
Percentile
65.4
In the wild
Unconfirmed
What it is

In Spring Cloud OpenFeign 3.0.0 to 3.0.4, 2.2.0.RELEASE to 2.2.9.RELEASE, and older unsupported versions, applications using type-level `@RequestMapping`annotations over Feign client interfaces, can be involuntarily exposing endpoints corresponding to `@RequestMapping`-annotated interface methods.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01100 · 65.4th percentile
Weakness
CWE-200 · Exposure of Sensitive Information to an Unauthorized Actor
Published
2021-10-28T15:20Z
EPSS history
Timeline
  • 28 OCT 15:20Z
    In Spring Cloud OpenFeign 3.0.0 to 3.0.4, 2.2.0.RELEASE to 2.2.9.RELEASE, and older unsupported versions, applications using type-level…
    cvelistv5