CVE-2024-52003 vulnerabilities

Vulnerabilities for packages: traefik...

CVE-2024-52003 X-Forwarded-Prefix Header still allows for Open Redirect in traefik

Traefik pronounced traffic is an HTTP reverse proxy and load balancer. There is a vulnerability in Traefik that allows the client to provide the X-Forwarded-Prefix header from an untrusted source. This issue has been addressed in versions 2.11.14 and 3.2.1. Users are advised to upgrade. There are...

CVE-2024-52003 X-Forwarded-Prefix Header still allows for Open Redirect in traefik

Traefik pronounced traffic is an HTTP reverse proxy and load balancer. There is a vulnerability in Traefik that allows the client to provide the X-Forwarded-Prefix header from an untrusted source. This issue has been addressed in versions 2.11.14 and 3.2.1. Users are advised to upgrade. There are...

CVE-2024-52003

CVE-2024-52003 – Traefik : Traefik versions 2.11.14 and 3.2.1 fix a vulnerability where an attacker can inject the untrusted X-Forwarded-Prefix header. The issue, as described, arises from the header handling by the HTTP reverse proxy/load balancer, enabling an external source to influence reques...

CVE-2024-52003 X-Forwarded-Prefix Header still allows for Open Redirect in traefik

Traefik pronounced traffic is an HTTP reverse proxy and load balancer. There is a vulnerability in Traefik that allows the client to provide the X-Forwarded-Prefix header from an untrusted source. This issue has been addressed in versions 2.11.14 and 3.2.1. Users are advised to upgrade. There are...

Traefik 输入验证错误漏洞

Traefik is an open source reverse proxy and load balancing tool from Traefik Open Source. An input validation error vulnerability exists in Traefik that stems from allowing a client to supply an X-Forwarded-Prefix header from an untrusted source...

PT-2024-35090

Name of the Vulnerable Software and Affected Versions Traefik versions prior to 2.11.14 Traefik versions prior to 3.2.1 Description There is a vulnerability in Traefik that allows the client to provide the X-Forwarded-Prefix header from an untrusted source. This issue can be exploited to bypass...

traefik-3.2.1-1.1 on GA media (moderate)

traefik-3.2.1-1.1 on GA media Announcement ID: openSUSE-SU-2024:14522-1 Rating: moderate Cross-References: CVE-2024-51744 CVSS scores: CVE-2024-51744 SUSE : 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N CVE-2024-51744 SUSE : 2.1 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N...

OPENSUSE-SU-2024:14522-1 traefik-3.2.1-1.1 on GA media

These are all security issues fixed in the traefik-3.2.1-1.1 package on the GA media of openSUSE Tumbleweed...

traefik2-2.11.14-1.1 on GA media (moderate)

traefik2-2.11.14-1.1 on GA media Announcement ID: openSUSE-SU-2024:14517-1 Rating: moderate Cross-References: CVE-2024-51744 CVSS scores: CVE-2024-51744 SUSE : 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N CVE-2024-51744 SUSE : 2.1 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:...

OPENSUSE-SU-2024:14517-1 traefik2-2.11.14-1.1 on GA media

These are all security issues fixed in the traefik2-2.11.14-1.1 package on the GA media of openSUSE Tumbleweed...

CVE-2024-51744 vulnerabilities

Vulnerabilities for packages: external-secrets-fips, minio, tkn-fips, terraform, terraform-provider-azurerm, chartmuseum-fips, buildkitd-fips, azcopy, azuredisk-csi-fips, secrets-store-csi-driver-provider-azure-fips, git-sync, keda, flux-notification-controller, grafana-alloy, trivy, traefik-fips...

The vulnerability of the Reverse Proxy Server Containous Traefik, due to insufficient verification of data authenticity, allows a hacker to execute arbitrary code.

The vulnerability of the Reverse Proxy Server of Containous Traefik is related to insufficient verification of data authenticity. Exploiting this vulnerability allows a malicious actor, operating remotely, to execute arbitrary code using a specially created HTTP request...

GO-2024-3135 HTTP client can manipulate custom HTTP headers that are added by Traefik in github.com/traefik/traefik

HTTP client can manipulate custom HTTP headers that are added by Traefik in github.com/traefik/traefik...

traefik2-2.11.10-1.1 on GA media (moderate)

traefik2-2.11.10-1.1 on GA media Announcement ID: openSUSE-SU-2024:14367-1 Rating: moderate Cross-References: CVE-2024-45410 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed in the...

OPENSUSE-SU-2024:14367-1 traefik2-2.11.10-1.1 on GA media

These are all security issues fixed in the traefik2-2.11.10-1.1 package on the GA media of openSUSE Tumbleweed...

traefik-3.1.4-1.1 on GA media (moderate)

traefik-3.1.4-1.1 on GA media Announcement ID: openSUSE-SU-2024:14365-1 Rating: moderate Cross-References: CVE-2024-45410 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed in the traefik-3.1.4-1.1...

OPENSUSE-SU-2024:14365-1 traefik-3.1.4-1.1 on GA media

These are all security issues fixed in the traefik-3.1.4-1.1 package on the GA media of openSUSE Tumbleweed...

SUSE CVE-2024-45410

Traefik is a golang, Cloud Native Application Proxy. When a HTTP request is processed by Traefik, certain HTTP headers such as X-Forwarded-Host or X-Forwarded-Port are added by Traefik before the request is routed to the application. For a HTTP client, it should not be possible to remove or modif...

CVE-2024-45410

Traefik is a golang, Cloud Native Application Proxy. When a HTTP request is processed by Traefik, certain HTTP headers such as X-Forwarded-Host or X-Forwarded-Port are added by Traefik before the request is routed to the application. For a HTTP client, it should not be possible to remove or modif...