CVE Catalog

CVE-2026-59298

LowCVSS 3.1
Published: Translated: NVD NIST

Summary

In Spring Cloud Function, there is a potential for improper filtering of HTTP headers, which may lead to header injection or other header-related attacks.

Risk Assessment

Improper header filtering could allow an attacker to manipulate HTTP requests, potentially leading to request smuggling or other security breaches.

Recommendation

Update Spring Cloud Function to a patched version or apply additional server-side protections.

Original NVD description (English source)

Potential for improper filtering of HTTP headers in Spring Cloud Function. Spring Cloud Function 5.0.0 - 5.0.3 Spring Cloud Function 4.3.0 - 4.3.4 Spring Cloud Function 4.2.0 - 4.2.7 Spring Cloud Function 3.2.16 and earlier

Vulnerability data from NVD (NIST) · CISA KEV · EPSS