Поиск уязвимостей
Количество 12
Количество 12
ALT-PU-2024-1254
ALT-PU-2024-1254: package `traefik` update to version 2.10.7-alt1
ALT-PU-2024-1883
ALT-PU-2024-1883: package `traefik` update to version 2.10.7-alt1
CVE-2023-47106
Traefik is an open source HTTP reverse proxy and load balancer. When a request is sent to Traefik with a URL fragment, Traefik automatically URL encodes and forwards the fragment to the backend server. This violates RFC 7230 because in the origin-form the URL should only contain the absolute path and the query. When this is combined with another frontend proxy like Nginx, it can be used to bypass frontend proxy URI-based access control restrictions. This vulnerability has been addressed in versions 2.10.6 and 3.0.0-beta5. Users are advised to upgrade. There are no known workarounds for this vulnerability.
CVE-2023-47106
Traefik is an open source HTTP reverse proxy and load balancer. When a ...
GHSA-fvhj-4qfh-q2hm
Traefik incorrectly processes fragment in the URL, leads to Authorization Bypass
CVE-2023-47124
Traefik is an open source HTTP reverse proxy and load balancer. When Traefik is configured to use the `HTTPChallenge` to generate and renew the Let's Encrypt TLS certificates, the delay authorized to solve the challenge (50 seconds) can be exploited by attackers to achieve a `slowloris attack`. This vulnerability has been patch in version 2.10.6 and 3.0.0-beta5. Users are advised to upgrade. Users unable to upgrade should replace the `HTTPChallenge` with the `TLSChallenge` or the `DNSChallenge`.
CVE-2023-47124
Traefik is an open source HTTP reverse proxy and load balancer. When T ...
CVE-2023-47633
Traefik is an open source HTTP reverse proxy and load balancer. The traefik docker container uses 100% CPU when it serves as its own backend, which is an automatically generated route resulting from the Docker integration in the default configuration. This issue has been addressed in versions 2.10.6 and 3.0.0-beta5. Users are advised to upgrade. There are no known workarounds for this vulnerability.
CVE-2023-47633
Traefik is an open source HTTP reverse proxy and load balancer. The tr ...
GHSA-8g85-whqh-cr2f
Traefik vulnerable to potential DDoS via ACME HTTPChallenge
GHSA-6fwg-jrfw-ff7p
Traefik docker container using 100% CPU
BDU:2024-03430
Уязвимость обратного прокси сервера Containous Traefik, связанная с неконтролируемым расходом ресурсов, позволяющая нарушителю вызвать отказ в обслуживании
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| ALT-PU-2024-1254 ALT-PU-2024-1254: package `traefik` update to version 2.10.7-alt1 | CVSS3: 7.5 | почти 3 года назад | |
| ALT-PU-2024-1883 ALT-PU-2024-1883: package `traefik` update to version 2.10.7-alt1 | CVSS3: 7.5 | больше 2 лет назад | |
 | CVE-2023-47106 Traefik is an open source HTTP reverse proxy and load balancer. When a request is sent to Traefik with a URL fragment, Traefik automatically URL encodes and forwards the fragment to the backend server. This violates RFC 7230 because in the origin-form the URL should only contain the absolute path and the query. When this is combined with another frontend proxy like Nginx, it can be used to bypass frontend proxy URI-based access control restrictions. This vulnerability has been addressed in versions 2.10.6 and 3.0.0-beta5. Users are advised to upgrade. There are no known workarounds for this vulnerability. | CVSS3: 6.5 | 1% Низкий | почти 3 года назад |
| CVE-2023-47106 Traefik is an open source HTTP reverse proxy and load balancer. When a ... | CVSS3: 6.5 | 1% Низкий | почти 3 года назад |
| GHSA-fvhj-4qfh-q2hm Traefik incorrectly processes fragment in the URL, leads to Authorization Bypass | CVSS3: 6.5 | 1% Низкий | почти 3 года назад |
| CVE-2023-47124 Traefik is an open source HTTP reverse proxy and load balancer. When Traefik is configured to use the `HTTPChallenge` to generate and renew the Let's Encrypt TLS certificates, the delay authorized to solve the challenge (50 seconds) can be exploited by attackers to achieve a `slowloris attack`. This vulnerability has been patch in version 2.10.6 and 3.0.0-beta5. Users are advised to upgrade. Users unable to upgrade should replace the `HTTPChallenge` with the `TLSChallenge` or the `DNSChallenge`. | CVSS3: 5.9 | 1% Низкий | почти 3 года назад |
| CVE-2023-47124 Traefik is an open source HTTP reverse proxy and load balancer. When T ... | CVSS3: 5.9 | 1% Низкий | почти 3 года назад |
| CVE-2023-47633 Traefik is an open source HTTP reverse proxy and load balancer. The traefik docker container uses 100% CPU when it serves as its own backend, which is an automatically generated route resulting from the Docker integration in the default configuration. This issue has been addressed in versions 2.10.6 and 3.0.0-beta5. Users are advised to upgrade. There are no known workarounds for this vulnerability. | CVSS3: 7.5 | 1% Низкий | почти 3 года назад |
| CVE-2023-47633 Traefik is an open source HTTP reverse proxy and load balancer. The tr ... | CVSS3: 7.5 | 1% Низкий | почти 3 года назад |
| GHSA-8g85-whqh-cr2f Traefik vulnerable to potential DDoS via ACME HTTPChallenge | CVSS3: 5.9 | 1% Низкий | почти 3 года назад |
| GHSA-6fwg-jrfw-ff7p Traefik docker container using 100% CPU | CVSS3: 7.5 | 1% Низкий | почти 3 года назад |
 | BDU:2024-03430 Уязвимость обратного прокси сервера Containous Traefik, связанная с неконтролируемым расходом ресурсов, позволяющая нарушителю вызвать отказ в обслуживании | CVSS3: 7.5 | 1% Низкий | почти 3 года назад |
Уязвимостей на страницу