| Package | Affected versions | Patched versions |
|---|---|---|
| org.springframework.cloud:spring-cloud-openfeign-core | ≥ 2.2.0, < 2.2.10≥ 3.0.0, < 3.0.5 | 2.2.103.0.5 |
| spring cloud openfeign | ≥ 2.2.0, ≤ 2.2.9≥ 3.0.0, ≤ 3.0.4 |
In Spring Cloud OpenFeign 3.0.0 to 3.0.4, 2.2.0.RELEASE to 2.2.9.RELEASE, and older unsupported versions, applications using type-level @RequestMappingannotations over Feign client interfaces, can be involuntarily exposing endpoints corresponding to @RequestMapping-annotated interface methods.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free