CVE-2024-53259 vulnerabilities

Vulnerabilities for packages: q, caddy, k3s, cloudflared, eks-distro-fips, eks-distro, traefik-fips, kubernetes-dns-node-cache-fips, spegel, frp, kubernetes-dns-node-cache, buf, caddy-fips, traefik...

CVE-2024-53259 vulnerabilities

Vulnerabilities for packages: cloudflared, spegel, k3s, q, kubernetes-dns-node-cache, buf, frp, caddy...

GHSA-H924-8G65-J9WG vulnerabilities

Vulnerabilities for packages: traefik...

Traefik's X-Forwarded-Prefix Header still allows for Open Redirect

Impact There is a vulnerability in Traefik that allows the client to provide the X-Forwarded-Prefix header from an untrusted source. Patches - https://github.com/traefik/traefik/releases/tag/v2.11.14 - https://github.com/traefik/traefik/releases/tag/v3.2.1 Workarounds No workaround. For more...

GHSA-H924-8G65-J9WG Traefik's X-Forwarded-Prefix Header still allows for Open Redirect

Impact There is a vulnerability in Traefik that allows the client to provide the X-Forwarded-Prefix header from an untrusted source. Patches - https://github.com/traefik/traefik/releases/tag/v2.11.14 - https://github.com/traefik/traefik/releases/tag/v3.2.1 Workarounds No workaround. For more...

CVE-2024-52003 vulnerabilities

Vulnerabilities for packages: traefik...

CVE-2024-52003

Traefik pronounced traffic is an HTTP reverse proxy and load balancer. There is a vulnerability in Traefik that allows the client to provide the X-Forwarded-Prefix header from an untrusted source. This issue has been addressed in versions 2.11.14 and 3.2.1. Users are advised to upgrade. There are...

CVE-2024-52003

Traefik pronounced traffic is an HTTP reverse proxy and load balancer. There is a vulnerability in Traefik that allows the client to provide the X-Forwarded-Prefix header from an untrusted source. This issue has been addressed in versions 2.11.14 and 3.2.1. Users are advised to upgrade. There are...

CVE-2024-52003 X-Forwarded-Prefix Header still allows for Open Redirect in traefik

Traefik pronounced traffic is an HTTP reverse proxy and load balancer. There is a vulnerability in Traefik that allows the client to provide the X-Forwarded-Prefix header from an untrusted source. This issue has been addressed in versions 2.11.14 and 3.2.1. Users are advised to upgrade. There are...

CVE-2024-52003 X-Forwarded-Prefix Header still allows for Open Redirect in traefik

Traefik pronounced traffic is an HTTP reverse proxy and load balancer. There is a vulnerability in Traefik that allows the client to provide the X-Forwarded-Prefix header from an untrusted source. This issue has been addressed in versions 2.11.14 and 3.2.1. Users are advised to upgrade. There are...

CVE-2024-52003

CVE-2024-52003 – Traefik : Traefik versions 2.11.14 and 3.2.1 fix a vulnerability where an attacker can inject the untrusted X-Forwarded-Prefix header. The issue, as described, arises from the header handling by the HTTP reverse proxy/load balancer, enabling an external source to influence reques...

CVE-2024-52003 X-Forwarded-Prefix Header still allows for Open Redirect in traefik

Traefik pronounced traffic is an HTTP reverse proxy and load balancer. There is a vulnerability in Traefik that allows the client to provide the X-Forwarded-Prefix header from an untrusted source. This issue has been addressed in versions 2.11.14 and 3.2.1. Users are advised to upgrade. There are...

PT-2024-35090

Name of the Vulnerable Software and Affected Versions Traefik versions prior to 2.11.14 Traefik versions prior to 3.2.1 Description There is a vulnerability in Traefik that allows the client to provide the X-Forwarded-Prefix header from an untrusted source. This issue can be exploited to bypass...

Traefik 输入验证错误漏洞

Traefik is an open source reverse proxy and load balancing tool from Traefik Open Source. An input validation error vulnerability exists in Traefik that stems from allowing a client to supply an X-Forwarded-Prefix header from an untrusted source...

traefik-3.2.1-1.1 on GA media (moderate)

traefik-3.2.1-1.1 on GA media Announcement ID: openSUSE-SU-2024:14522-1 Rating: moderate Cross-References: CVE-2024-51744 CVSS scores: CVE-2024-51744 SUSE : 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N CVE-2024-51744 SUSE : 2.1 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N...

OPENSUSE-SU-2024:14522-1 traefik-3.2.1-1.1 on GA media

These are all security issues fixed in the traefik-3.2.1-1.1 package on the GA media of openSUSE Tumbleweed...

traefik2-2.11.14-1.1 on GA media (moderate)

traefik2-2.11.14-1.1 on GA media Announcement ID: openSUSE-SU-2024:14517-1 Rating: moderate Cross-References: CVE-2024-51744 CVSS scores: CVE-2024-51744 SUSE : 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N CVE-2024-51744 SUSE : 2.1 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:...

OPENSUSE-SU-2024:14517-1 traefik2-2.11.14-1.1 on GA media

These are all security issues fixed in the traefik2-2.11.14-1.1 package on the GA media of openSUSE Tumbleweed...

CVE-2024-51744 vulnerabilities

Vulnerabilities for packages: azcopy, rclone, kaniko-fips, wal-g, crossplane-provider-azure-managedidentity, harbor-fips, grafana-alloy-fips, harbor, azuredisk-csi-fips, kubeflow-katib, kyverno, consul, traefik, terraform, openbao, crossplane-provider-azure-authorization, mc, ko-fips, promxy,...

The vulnerability of the Reverse Proxy Server Containous Traefik, due to insufficient verification of data authenticity, allows a hacker to execute arbitrary code.

The vulnerability of the Reverse Proxy Server of Containous Traefik is related to insufficient verification of data authenticity. Exploiting this vulnerability allows a malicious actor, operating remotely, to execute arbitrary code using a specially created HTTP request...