Lucene search
+L

302 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/05/30 12:00 a.m.•1 views

CVE-2025-47952: Improper Limitation of a Pathname to a Restricted Directory

Traefik pronounced traffic is an HTTP reverse proxy and load balancer. Prior to versions 2.11.25 and 3.4.1, there is a potential vulnerability in Traefik managing the requests using a PathPrefix, Path or PathRegex matcher. When Traefik is configured to route the requests to a backend using a...

9.1CVSS5.7AI score0.00943EPSS
SaveExploits0References1
Github Security Blog
Github Security Blog
•added 2025/05/28 2:25 p.m.•62 views

Traefik allows path traversal using url encoding

Impact There is a potential vulnerability in Traefik managing the requests using a PathPrefix, Path or PathRegex matcher. When Traefik is configured to route the requests to a backend using a matcher based on the path, if the URL contains a URL encoded string in its path, it’s possible to target ...

9.1CVSS6.2AI score0.00943EPSS
SaveExploits0References6Affected Software3
OSV
OSV
•added 2025/05/28 2:25 p.m.•11 views

GHSA-VRCH-868G-9JX5 Traefik allows path traversal using url encoding

Impact There is a potential vulnerability in Traefik managing the requests using a PathPrefix, Path or PathRegex matcher. When Traefik is configured to route the requests to a backend using a matcher based on the path, if the URL contains a URL encoded string in its path, it’s possible to target ...

6.3CVSS6.9AI score0.00943EPSS
SaveExploits0References6
SUSE CVE
SUSE CVE
•added 2025/04/24 3:24 a.m.•12 views

SUSE CVE-2025-32431

Traefik pronounced traffic is an HTTP reverse proxy and load balancer. In versions prior to 2.11.24, 3.3.6, and 3.4.0-rc2. There is a potential vulnerability in Traefik managing the requests using a PathPrefix, Path or PathRegex matcher. When Traefik is configured to route the requests to a backe...

9.1CVSS4AI score0.00929EPSS
SaveExploits0References3
GithubExploit
GithubExploit
•added 2025/04/23 8:19 a.m.•131 views

Exploit for CVE-2025-29927

CVE-2025-29927 CVE-2025-29927: Next.js Middleware Bypass Vulne...

9.1CVSS7.3AI score0.99225EPSS
SaveExploits60
OSV
OSV
•added 2025/04/21 4:17 p.m.•32 views

GHSA-6P68-W45G-48J7 Traefik has a possible vulnerability with its path matchers

Impact There is a potential vulnerability in Traefik managing the requests using a PathPrefix, Path or PathRegex matcher. When Traefik is configured to route the requests to a backend using a matcher based on the path, if the URL contains a /../ in its path, it’s possible to target a backend,...

9.3CVSS4.1AI score0.00929EPSS
SaveExploits0References7
Github Security Blog
Github Security Blog
•added 2025/04/21 4:17 p.m.•43 views

Traefik has a possible vulnerability with its path matchers

Impact There is a potential vulnerability in Traefik managing the requests using a PathPrefix, Path or PathRegex matcher. When Traefik is configured to route the requests to a backend using a matcher based on the path, if the URL contains a /../ in its path, it’s possible to target a backend,...

9.3CVSS4.1AI score0.00929EPSS
SaveExploits0References7Affected Software3
AlpineLinux
AlpineLinux
•added 2025/04/21 4:15 p.m.•19 views

CVE-2025-32431

Traefik pronounced traffic is an HTTP reverse proxy and load balancer. In versions prior to 2.11.24, 3.3.6, and 3.4.0-rc2. There is a potential vulnerability in Traefik managing the requests using a PathPrefix, Path or PathRegex matcher. When Traefik is configured to route the requests to a backe...

9.3CVSS7.2AI score0.00929EPSS
SaveExploits0References5
NVD
NVD
•added 2025/04/21 4:15 p.m.•64 views

CVE-2025-32431

Traefik pronounced traffic is an HTTP reverse proxy and load balancer. In versions prior to 2.11.24, 3.3.6, and 3.4.0-rc2. There is a potential vulnerability in Traefik managing the requests using a PathPrefix, Path or PathRegex matcher. When Traefik is configured to route the requests to a backe...

9.3CVSS0.00929EPSS
SaveExploits0References5
Snyk
Snyk
•added 2025/04/21 3:40 p.m.•4 views

Directory Traversal

Overview github.com/traefik/traefik/v2/pkg/server is a server package for traefik, a cloud native edge router. Affected versions of this package are vulnerable to Directory Traversal when routing requests to a backend using a PathPrefix, Path, or PathRegex matcher. An attacker can bypass the...

9.3CVSS5.1AI score0.00929EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2025/04/21 3:34 p.m.•55 views

CVE-2025-32431 Traefik has a possible vulnerability with the path matchers

Traefik pronounced traffic is an HTTP reverse proxy and load balancer. In versions prior to 2.11.24, 3.3.6, and 3.4.0-rc2. There is a potential vulnerability in Traefik managing the requests using a PathPrefix, Path or PathRegex matcher. When Traefik is configured to route the requests to a backe...

9.3CVSS0.00929EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2025/04/21 12:00 a.m.•16 views

Traefik 路径遍历漏洞

Traefik is an open source reverse proxy and load balancing tool from Traefik Open Source. Traefik suffers from a path traversal vulnerability that stems from the fact that when managing requests using a PathPrefix, Path, or PathRegex matcher, it is possible to bypass the middleware chain by using...

9.3CVSS3.9AI score0.00929EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/21 12:00 a.m.•3 views

CVE-2025-32431: Improper Limitation of a Pathname to a Restricted Directory

Traefik pronounced traffic is an HTTP reverse proxy and load balancer. In versions prior to 2.11.24, 3.3.6, and 3.4.0-rc2. There is a potential vulnerability in Traefik managing the requests using a PathPrefix, Path or PathRegex matcher. When Traefik is configured to route the requests to a backe...

9.3CVSS5.9AI score0.00929EPSS
SaveExploits0References1
GithubExploit
GithubExploit
•added 2025/04/14 3:12 p.m.•268 views

Exploit for CVE-2025-29927

Exploit for CVE-2025-29927 Next.js - Authorization Bypass !...

9.1CVSS7.5AI score0.99225EPSS
SaveExploits60
GithubExploit
GithubExploit
•added 2025/03/27 11:48 a.m.•132 views

Exploit for CVE-2025-29927

PoC for Next.js Middleware Bypass CVE-2025-29927 !Python...

9.1CVSS7.5AI score0.99225EPSS
SaveExploits60
GithubExploit
GithubExploit
•added 2025/03/27 11:48 a.m.•117 views

Exploit for CVE-2025-29927

PoC for Next.js Middleware Bypass CVE-2025-29927 !Python...

9.1CVSS7.5AI score0.99225EPSS
SaveExploits60
GithubExploit
GithubExploit
•added 2025/03/26 12:12 a.m.•259 views

Exploit for CVE-2025-29927

Next.js Middleware Bypass CVE-2025-29927 Proof of Concept T...

9.1CVSS7.5AI score0.99225EPSS
SaveExploits60
GithubExploit
GithubExploit
•added 2025/03/25 11:39 a.m.•242 views

Exploit for CVE-2025-29927

Testing script for CVE-2025-29927 Provided by CyberMaxx. CV...

9.1CVSS7.4AI score0.99225EPSS
SaveExploits60
GithubExploit
GithubExploit
•added 2025/03/25 11:39 a.m.•177 views

Exploit for CVE-2025-29927

Testing script for CVE-2025-29927 Provided by CyberMaxx. CV...

9.1CVSS7.4AI score0.99225EPSS
SaveExploits60
GithubExploit
GithubExploit
•added 2025/03/25 10:30 a.m.•302 views

Exploit for CVE-2025-29927

CVE-2025-29927: Next.js Middleware Bypass Vulnerability PoC T...

9.1CVSS7.2AI score0.99225EPSS
SaveExploits60
Rows per page
Query Builder