EndpointRequest.to() creates a matcher for null/** if the actuator endpoint, for which the EndpointRequest has been created, is disabled or not exposed.

Your application may be affected by this if all the following conditions are met:

* You use Spring Security
* EndpointRequest.to() has been used in a Spring Security chain configuration
* The endpoint which EndpointRequest references is disabled or not exposed via web
* Your application handles requests to /null and this path needs protection


You are not affected if any of the following is true:

* You don't use Spring Security
* You don't use EndpointRequest.to()
* The endpoint which EndpointRequest.to() refers to is enabled and is exposed
* Your application does not handle requests to /null or this path does not need protection

Published: 2025-04-28

CVSS: 7.3

CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Download Exploit for CVE-2025-22235 here:

Use Tor Browser to access .onion links.

Check our team here:

https://tatramed.sk/exploit-1050-cve-2023-44221/

https://tatramed.sk/exploit-694-cve-2023-37580/

https://tatramed.sk/exploit-683-cve-2023-39017/

https://tatramed.sk/exploit-12-cve-2024-0057/