CVE-2025-41253 · Brief

CVEs like CVE-2025-41253

The records whose text reads closest to CVE-2025-41253, in the order Forge ranked them. The number on each row is Forge's similarity score. The reason under each row uses held facts only.

1. CVE-2025-412430.896
   Spring Expression Language property modification using Spring Cloud Gateway Server WebFlux

   Same weakness class, CWE-917 (expression language injection).

2. CVE-2022-229630.678
   In Spring Cloud Function versions 3.1.6, 3.2.2 and older unsupported versions, when using routing functionality it is…

   Close in meaning. The records share no weakness class, product family or exploited-list entry we hold.

3. CVE-2020-265650.602
   ObjectPlanet Opinio before 7.14 allows Expression Language Injection via the admin/permissionList.do from parameter.

   Same weakness class, CWE-917 (expression language injection).

4. CVE-2022-229500.606
   n Spring Framework versions 5.3.0 - 5.3.16 and older unsupported versions, it is possible for a user to provide a…

   Close in meaning. The records share no weakness class, product family or exploited-list entry we hold.

5. CVE-2021-220510.643
   Applications using Spring Cloud Gateway are vulnerable to specifically crafted requests that could make an extra…

   Close in meaning. The records share no weakness class, product family or exploited-list entry we hold.

6. CVE-2024-377590.657
   DataGear v5.0.0 and earlier was discovered to contain a SpEL (Spring Expression Language) expression injection…

   Related weakness classes, CWE-74 is above CWE-917.

7. CVE-2022-229470.716
   In spring cloud gateway versions prior to 3.1.1+ and 3.0.7+ , applications are vulnerable to a code injection attack…

   Close in meaning. The records share no weakness class, product family or exploited-list entry we hold.

8. CVE-2026-478790.633
   Spring Cloud Gateway SSRF and native file access with gRPC

   Close in meaning. The records share no weakness class, product family or exploited-list entry we hold.

9. CVE-2022-229800.621
   A Spring Data MongoDB application is vulnerable to SpEL Injection when using @Query or @Aggregation-annotated query…

   Same weakness class, CWE-917 (expression language injection).

10. CVE-2026-592830.638
    Spring Framework Safety Guard Bypass via SpEL Expression Compilation

    Close in meaning. The records share no weakness class, product family or exploited-list entry we hold.

computed Similarity is computed, not recorded. Model Forge pro. Drawn from 395,466 records. Fetched 2026-10-30.