p PatchFirst

CVE-2024-52003

CVE-2024-52003 · X-Forwarded-Prefix Header still allows for Open Redirect in traefik

Cette page présente des faits issus de sources publiques. Consultez l’avis original avant toute mise à jour.

Traefik (pronounced traffic) is an HTTP reverse proxy and load balancer. There is a vulnerability in Traefik that allows the client to provide the X-Forwarded-Prefix header from an untrusted source. This issue has been addressed in versions 2.11.14 and 3.2.1. Users are advised to upgrade. There are no known workarounds for this vulnerability.

CVSS 6.3 · Moyenne · EPSS 0,4%

Publication
Mise à jour

Pile logicielle: web

Produits et versions concernés

  • traefik

    Versions du logiciel
    • < 2.11.14: Concernée
    • >= 3.0.0, < 3.2.1: Concernée

    Aucun correctif publié

Sources originales

Vérifiez votre serveur →