The vulnerability of the nameAndService() function in the pkg/provider/kubernetes/crd/kubernetes_http.go file, a provider for integrating with the Kubernetes CRD of the reverse proxy server Containous Traefik, allows an attacker to gain unauthorized access to protected information.

The vulnerability of the nameAndService function in the pkg/provider/kubernetes/crd/kuberneteshttp.go file, which is part of the integration provider for Kubernetes’ CRD reverse proxy server Containous Traefik, is related to insufficient spatial partitioning. Exploiting this vulnerability could...

Incorrect Authorization

Overview Affected versions of this package are vulnerable to Incorrect Authorization via pkg/provider/kubernetes/crd/kubernetestcp.go through makeTCPServersTransportKey when processing IngressRouteTCP service serversTransport references. An attacker can make Traefik accept a forbidden...