Lucene search
K

12 matches found

EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2023-3160

Malicious code in bioql PyPI...

5.9CVSS6.4AI score0.00227EPSS
Exploits0References9
RedhatCVE
RedhatCVE
added 2025/05/23 1:59 a.m.6 views

CVE-2023-47124

Traefik is an open source HTTP reverse proxy and load balancer. When Traefik is configured to use the HTTPChallenge to generate and renew the Let's Encrypt TLS certificates, the delay authorized to solve the challenge 50 seconds can be exploited by attackers to achieve a slowloris attack. This...

5.9CVSS6.7AI score0.00227EPSS
Exploits0References1
OSV
OSV
added 2024/08/21 2:30 p.m.11 views

GO-2023-2381 Traefik vulnerable to potential DDoS via ACME HTTPChallenge in github.com/traefik/traefik

Traefik vulnerable to potential DDoS via ACME HTTPChallenge in github.com/traefik/traefik...

5.9CVSS5.8AI score0.00227EPSS
Exploits0References8
SUSE CVE
SUSE CVE
added 2023/12/06 2:4 a.m.1 views

SUSE CVE-2023-47124

Traefik is an open source HTTP reverse proxy and load balancer. When Traefik is configured to use the HTTPChallenge to generate and renew the Let's Encrypt TLS certificates, the delay authorized to solve the challenge 50 seconds can be exploited by attackers to achieve a slowloris attack. This...

5.9CVSS7.2AI score0.00227EPSS
Exploits0References3
OSV
OSV
added 2023/12/05 6:12 p.m.19 views

GHSA-8G85-WHQH-CR2F Traefik vulnerable to potential DDoS via ACME HTTPChallenge

Impact There is a potential vulnerability in Traefik managing the ACME HTTP challenge. When Traefik is configured to use the HTTPChallenge to generate and renew the Let's Encrypt TLS certificates, the delay authorized to solve the challenge 50 seconds can be exploited by attackers slowloris attac...

5.9CVSS5.8AI score0.00227EPSS
Exploits0References9
Github Security Blog
Github Security Blog
added 2023/12/05 6:12 p.m.31 views

Traefik vulnerable to potential DDoS via ACME HTTPChallenge

Impact There is a potential vulnerability in Traefik managing the ACME HTTP challenge. When Traefik is configured to use the HTTPChallenge to generate and renew the Let's Encrypt TLS certificates, the delay authorized to solve the challenge 50 seconds can be exploited by attackers slowloris attac...

5.9CVSS6.9AI score0.00227EPSS
Exploits0References9Affected Software2
NVD
NVD
added 2023/12/04 9:15 p.m.12 views

CVE-2023-47124

Traefik is an open source HTTP reverse proxy and load balancer. When Traefik is configured to use the HTTPChallenge to generate and renew the Let's Encrypt TLS certificates, the delay authorized to solve the challenge 50 seconds can be exploited by attackers to achieve a slowloris attack. This...

5.9CVSS0.00227EPSS
Exploits0References8
AlpineLinux
AlpineLinux
added 2023/12/04 9:15 p.m.25 views

CVE-2023-47124

Traefik is an open source HTTP reverse proxy and load balancer. When Traefik is configured to use the HTTPChallenge to generate and renew the Let's Encrypt TLS certificates, the delay authorized to solve the challenge 50 seconds can be exploited by attackers to achieve a slowloris attack. This...

5.9CVSS6.9AI score0.00227EPSS
Exploits0
Prion
Prion
added 2023/12/04 9:15 p.m.17 views

Code injection

Traefik is an open source HTTP reverse proxy and load balancer. When Traefik is configured to use the HTTPChallenge to generate and renew the Let's Encrypt TLS certificates, the delay authorized to solve the challenge 50 seconds can be exploited by attackers to achieve a slowloris attack. This...

2.6CVSS6.9AI score0.00227EPSS
Exploits0References7Affected Software1
Cvelist
Cvelist
added 2023/12/04 8:20 p.m.18 views

CVE-2023-47124 Denial of service whith ACME HTTPChallenge in Traefik

Traefik is an open source HTTP reverse proxy and load balancer. When Traefik is configured to use the HTTPChallenge to generate and renew the Let's Encrypt TLS certificates, the delay authorized to solve the challenge 50 seconds can be exploited by attackers to achieve a slowloris attack. This...

5.9CVSS5.8AI score0.00227EPSS
Exploits0References7
CVE
CVE
added 2023/12/04 8:20 p.m.382 views

CVE-2023-47124

CVE-2023-47124 describes a DoS vector in Traefik when using HTTPChallenge to obtain/renew Let’s Encrypt TLS certificates: the 50-second delay allowed solving the challenge can be abused for a slowloris-style attack. Public details in the initial document specify impacts as a server availability r...

5.9CVSS5.8AI score0.00227EPSS
Exploits0References8Affected Software1
OSV
OSV
added 2023/12/04 8:20 p.m.20 views

CVE-2023-47124 Denial of service whith ACME HTTPChallenge in Traefik

Traefik is an open source HTTP reverse proxy and load balancer. When Traefik is configured to use the HTTPChallenge to generate and renew the Let's Encrypt TLS certificates, the delay authorized to solve the challenge 50 seconds can be exploited by attackers to achieve a slowloris attack. This...

5.9CVSS6.2AI score0.00227EPSS
Exploits0References10
Rows per page
Query Builder