Spring Cloud Base
Approved changes feed: RSS · Atom
cpe:2.3:a:fp2952:spring-cloud-base:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Fp2952 (fa85f0be-9396-5a83-9c5a-fb435e9594e8) |
|---|---|
| Product | Spring Cloud Base (2152ba7b-c09e-5fea-8cd8-bb9358b3f7f6) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-4328 |
vulnerable | 2026-06-08 07:29:16.039432 |
fp2952 spring-cloud-base HTTP Header MvcController.java sendBack redirect
LOW (3.5)
A vulnerability was found in fp2952 spring-cloud-base up to 7f050dc6db9afab82c5ce1d41cd74ed255ec9bfa. It has been declared as problematic. Affected by this vulnerability is the function sendBack of the file /spring-cloud-base-master/auth-center/auth-center-provider/src/main/java/com/peng/auth/provider/config/web/MvcController.java of the component HTTP Header Handler. The manipulation of the argument Referer leads to open redirect. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. This product takes the approach of rolling releases to provide continious delivery. Therefore, version details for affected and updated releases are not available.
Published: 2025-05-06T07:00:07.092Z
Updated: 2025-05-06T14:14:12.642Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.