PT-2021-19947 · Traefik +1 · Traefik +1

Name of the Vulnerable Software and Affected Versions: Traefik versions prior to 2.4.13 Description: The issue concerns Traefik's handling of the Connection header, which could potentially lead to a header vulnerability. Active exploitation of this issue is unlikely as it requires a removed heade...

Containous Traefik 安全漏洞

Containous Traefik is a reverse proxy and load balancer from the US company Containous. versions prior to Traefik 2.4.13 have a security vulnerability that can be exploited by attackers to elevate privileges...

CVE-2021-27375

Traefik before 2.4.5 allows the loading of IFRAME elements from other domains...

CVE-2021-27375

Traefik before 2.4.5 allows the loading of IFRAME elements from other domains...

CVE-2021-27375

Traefik before 2.4.5 allows the loading of IFRAME elements from other domains...

Design/Logic Flaw

Traefik before 2.4.5 allows the loading of IFRAME elements from other domains...

CVE-2021-27375

Traefik (software) is affected by CVE-2021-27375. The issue arises in versions prior to 2.4.5 and allows loading of IFRAME elements from other domains. The impact is that an attacker could potentially load cross-domain content via IFRAMEs due to this vulnerability. The public record notes a fix i...

CVE-2021-27375

Traefik before 2.4.5 allows the loading of IFRAME elements from other domains...

CVE-2021-27375: Improper Restriction of Rendered UI Layers or Frames

Traefik before 2.4.5 allows the loading of IFRAME elements from other domains...

Containous Traefik Security Vulnerability

Containous Traefik is a reverse proxy and load balancer from Containous USA. A security vulnerability exists in Containous Traefik. The vulnerability stems from the software allowing IFRAME to be loaded from other domains.The following products and versions are affected:Containous Traefik 2.4.3...

Open Rediection

github.com/containous/traefik is vulnerable to open redirection. The X-Forwarded-Prefix header allows an attacker to redirect a user to a malicious site due to lack of validation...

CVE-2020-15129

In Traefik before versions 1.7.26, 2.2.8, and 2.3.0-rc3, there exists a potential open redirect vulnerability in Traefik's handling of the "X-Forwarded-Prefix" header. The Traefik API dashboard component doesn't validate that the value of the header "X-Forwarded-Prefix" is a site relative path an...

CVE-2020-15129

In Traefik before versions 1.7.26, 2.2.8, and 2.3.0-rc3, there exists a potential open redirect vulnerability in Traefik's handling of the "X-Forwarded-Prefix" header. The Traefik API dashboard component doesn't validate that the value of the header "X-Forwarded-Prefix" is a site relative path an...

CVE-2020-15129

In Traefik before versions 1.7.26, 2.2.8, and 2.3.0-rc3, there exists a potential open redirect vulnerability in Traefik's handling of the "X-Forwarded-Prefix" header. The Traefik API dashboard component doesn't validate that the value of the header "X-Forwarded-Prefix" is a site relative path an...

Open redirect

In Traefik before versions 1.7.26, 2.2.8, and 2.3.0-rc3, there exists a potential open redirect vulnerability in Traefik's handling of the "X-Forwarded-Prefix" header. The Traefik API dashboard component doesn't validate that the value of the header "X-Forwarded-Prefix" is a site relative path an...

CVE-2020-15129 Open redirect in Traefik

In Traefik before versions 1.7.26, 2.2.8, and 2.3.0-rc3, there exists a potential open redirect vulnerability in Traefik's handling of the "X-Forwarded-Prefix" header. The Traefik API dashboard component doesn't validate that the value of the header "X-Forwarded-Prefix" is a site relative path an...

CVE-2020-15129

CVE-2020-15129 — Traefik open redirect affects Traefik pre-1.7.26, 2.2.8, and 2.3.0-rc3. The root cause is that the API dashboard’s handling of the X-Forwarded-Prefix header does not validate that the value is a site-relative path, allowing redirects to arbitrary URIs. Impact per sources: an atta...

CVE-2020-15129

In Traefik before versions 1.7.26, 2.2.8, and 2.3.0-rc3, there exists a potential open redirect vulnerability in Traefik's handling of the "X-Forwarded-Prefix" header. The Traefik API dashboard component doesn't validate that the value of the header "X-Forwarded-Prefix" is a site relative path an...

CVE-2020-15129: URL Redirection to Untrusted Site

In Traefik before versions 1.7.26, 2.2.8, and 2.3.0-rc3, there exists a potential open redirect vulnerability in Traefik's handling of the "X-Forwarded-Prefix" header. The Traefik API dashboard component doesn't validate that the value of the header "X-Forwarded-Prefix" is a site relative path an...

Man-in-the-middle (MitM)

github.com/containous/traefik is vulnerable to man-in-the-middle attack. It does not establish a mutual TLS verification for HTTPS sessions when the error ERRBADSSLCLIENTAUTHCERT occurs...