Lucene search
+L

3 matches found

OSV
OSV
•added 2023/12/05 6:11 p.m.•37 views

GHSA-FVHJ-4QFH-Q2HM Traefik incorrectly processes fragment in the URL, leads to Authorization Bypass

Summary When a request is sent to Traefik with a URL fragment, Traefik automatically URL encodes and forwards the fragment to the backend server. This violates the RFC because in the origin-form the URL should only contain the absolute path and the query. When this is combined with another fronte...

6.5CVSS6.5AI score0.00625EPSS
SaveExploits1References6
Rows per page
Query Builder