Description
攻击者可以通过访问系统中注册的@systemPropertiesbean，修改配置属性，从而关闭限制性模式。一旦成功绕过限制，攻击者就能够访问@environment等敏感bean，实现应用程序配置信息的泄露，在特定条件下甚至可能实现远程代码执行.
Spring Cloud Gateway环境属性修改漏洞 (CVE-2025-41243)
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://spring.io/security/cve-2025-41243
https://nvd.nist.gov/vuln/detail/CVE-2025-41243
https://github.com/advisories/GHSA-q2cj-h8fw-q4cc
https://www.cnblogs.com/wzzkaifa/p/19160103
https://zhuanlan.zhihu.com/p/1954612818579023106
https://cloud.tencent.com/developer/article/2580358
https://blog.z3r.ru/posts/spring-cloud-gateway-spel-vuln/
https://psytester.github.io/CVE-2025-41243_Spring_SpEL_property_modification/
https://www.herodevs.com/blog-posts/spring-cloud-gateway-critical-environment-modification-vulnerability-cve-2025-41243