CVE-2023-34036

Summary

CVE-2023-34036 is a vulnerability that affects reactive web applications using Spring HATEOAS to produce hypermedia-based responses. The vulnerability occurs when the application does not have safeguards against malicious forwarded headers, or if it is not behind a trusted proxy. This vulnerability can be remediated by implementing measures to handle and discard forwarded headers either in WebFlux or at the level of the underlying HTTP server. The potential danger to an organization is that malicious actors could exploit this vulnerability to manipulate or inject unauthorized content into the application's responses, potentially leading to data breaches or other security incidents. The vulnerability has a base severity rating of MEDIUM and a base score of 5.3 according to CVSS:3.1.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.