CyberRota Analysis
AI-GeneratedThe vulnerability lies in the isSecure() method of the ServerlessHttpServletRequest, which fails to properly verify the actual scheme, potentially allowing for misclassification of secure connections. This could lead to security misconfigurations, impacting applications that rely on accurate scheme verification for secure communication. Organizations using Spring Cloud Function versions 4.2.0 to 5.0.3 should prioritize addressing this issue to mitigate potential security risks.
CVE
CVE-2026-59297
Severity
LOW
CVSS
3.1
EPSS
0.10%
Original NVD Description
Implementation of isSecure() call of ServerlessHttpServletRequest does not verify the actual scheme. Spring Cloud Function 5.0.0 - 5.0.3 Spring Cloud Function 4.3.0 - 4.3.4 Spring Cloud Function 4.2.0 - 4.2.7
Related CVEs
Other vulnerabilities affecting the same vendor(s)