What’s Vulnerable › Vulnerabilities
CVE-2021-22044
- Severity: high (CVSS 7.5 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 1.1% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2021-10-28 · updated 2026-06-17
- Weakness: CWE-200
Description
In Spring Cloud OpenFeign 3.0.0 to 3.0.4, 2.2.0.RELEASE to 2.2.9.RELEASE, and older unsupported versions, applications using type-level `@RequestMapping`annotations over Feign client interfaces, can be involuntarily exposing endpoints corresponding to `@RequestMapping`-annotated interface methods.
Affected products
- Spring Cloud OpenFeign: from 2.2.0 through 2.2.9; from 3.0.0 through 3.0.4
- Spring Cloud OpenFeign: from Spring Cloud OpenFeign versions 3.0.x prior through 3.0.5+, 2.2.x prior to 2.2.10. RELEASE+ and all older unsupported versions are impacted.
References
Get alerted when CVE-2021-22044 or the next vulnerability affects your stack