CyberRota Analysis
AI-GeneratedThe grpc-gateway v2.28.0 is vulnerable due to improper handling of the X-HTTP-Method-Override header, which allows attackers to manipulate request methods in POST requests with the application/x-www-form-urlencoded content type. This flaw can lead to the circumvention of method-based access controls implemented by upstream proxies or web application firewalls, potentially exposing sensitive operations to unauthorized users. Organizations using this version of grpc-gateway should prioritize remediation to mitigate the risk of unauthorized access.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
grpc-gateway v2.28.0 is vulnerable to Incorrect Access Control. The application processes the X-HTTP-Method-Override header in ServeMux.ServeHTTP without restricting allowed methods. When a POST request with Content-Type application/x-www-form-urlencoded includes this header, the request method is rewritten to an arbitrary attacker-supplied value before routing. This allows bypassing method-based access controls enforced by upstream proxies or WAFs.