CVE-2024-52003
Traefik (pronounced traffic) is an HTTP reverse proxy and load balancer. There is a vulnerability in Traefik that allows the client to provide the X-Forwarded-Prefix header from an untrusted source. This issue has been addressed in versions 2.11.14 and 3.2.1. Users are advised to upgrade. There are no known workarounds for this vulnerability.
- Score
- CVSS 4.0 6.3 Medium
- Status
- Analyzed - security-advisories@github.com
- Published
- 2024-11-29
- Last modified
- 2024-12-02
- Weaknesses
- CWE-601
Affected products
References
- https://github.com/traefik/traefik/pull/11253
- https://github.com/traefik/traefik/releases/tag/v2.11.14
- https://github.com/traefik/traefik/releases/tag/v3.2.1
- https://github.com/traefik/traefik/security/advisories/GHSA-h924-8g65-j9wg
