https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 15:44:19 +0000 https://cve.radiocsirt.org/vuln/certfr-2024-avi-1029 certfr-2024-avi-1029 https://cve.radiocsirt.org/vuln/certfr-2024-avi-1029 https://cve.radiocsirt.org/vuln/euvd-2026-205252 EUVD-2026-205252 https://cve.radiocsirt.org/vuln/euvd-2026-205252 https://cve.radiocsirt.org/vuln/fkie_cve-2024-52003 <p>Traefik (pronounced traffic) is an HTTP reverse proxy and load balancer. There is a vulnerability in Traefik that allows the client to provide the X-Forwarded-Prefix header from an untrusted source. This issue has been addressed in versions 2.11.14 and 3.2.1. Users are advised to upgrade. There are no known workarounds for this vulnerability.</p> <p>Traefik (pronounced traffic) is an HTTP reverse proxy and load balancer. There is a vulnerability in Traefik that allows the client to provide the X-Forwarded-Prefix header from an untrusted source. This issue has been addressed in versions 2.11.14 and 3.2.1. Users are advised to upgrade. There are no known workarounds for this vulnerability.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-52003 https://cve.radiocsirt.org/vuln/ghsa-h924-8g65-j9wg <p><strong>Affected:</strong> Go: github.com/traefik/traefik/v2, Go: github.com/traefik/traefik/v3</p> <p>### Impact</p> <p>There is a vulnerability in Traefik that allows the client to provide the `X-Forwarded-Prefix` header from an untrusted source.</p> <p>### Patches</p> <p>- https://github.com/traefik/traefik/releases/tag/v2.11.14 - https://github.com/traefik/traefik/releases/tag/v3.2.1</p> <p>### Workarounds</p> <p>No workaround.</p> <p>### For more information</p> <p>If you have any questions or comments about this advisory, please [open an issue](https://github.com/traefik/traefik/issues).</p> <p>&lt;details&gt; &lt;summary&gt;Original Description&lt;/summary&gt; ### Summary The previously reported open redirect ([GHSA-6qq8-5wq3-86rp](https://github.com/traefik/traefik/security/advisories/GHSA-6qq8-5wq3-86rp)) is not fixed correctly. The safePrefix function can be tricked to return an absolute URL.</p> <p>### Details The Traefik API [dashboard component](https://github.com/traefik/traefik/blob/master/pkg/api/dashboard/dashboard.go) tries to validate that the value of the header X-Forwarded-Prefix is a site relative path: ```go http.Redirect(resp, req, safePrefix(req)+&#34;/dashboard/&#34;, http.StatusFound) ```</p> <p>```go func safePrefix(req *http.Request) string { prefix := req.Header.Get(&#34;X-Forwarded-Prefix&#34;) if prefix == &#34;&#34; { return &#34;&#34; }</p> <p>parse, err := url.Parse(prefix) if err != nil { return &#34;&#34; }</p> <p>return parse.Path } ```</p> <p>### PoC An attacker can bypass this by sending the following payload:</p> <p>```bash curl -v &#39;http://traefik.localhost&#39; -H &#39;X-Forwarded-Prefix: %0d//a.com&#39; [...] &gt; HTTP/1.1 302 Found &gt; Location: //a.com/dashboard/ ```</p> <p>or sim…</p> <p><strong>Affected:</strong> Go: github.com/traefik/traefik/v2, Go: github.com/traefik/traefik/v3</p> <p>### Impact</p> <p>There is a vulnerability in Traefik that allows the client to provide the `X-Forwarded-Prefix` header from an untrusted source.</p> <p>### Patches</p> <p>- https://github.com/traefik/traefik/releases/tag/v2.11.14 - https://github.com/traefik/traefik/releases/tag/v3.2.1</p> <p>### Workarounds</p> <p>No workaround.</p> <p>### For more information</p> <p>If you have any questions or comments about this advisory, please [open an issue](https://github.com/traefik/traefik/issues).</p> <p>&lt;details&gt; &lt;summary&gt;Original Description&lt;/summary&gt; ### Summary The previously reported open redirect ([GHSA-6qq8-5wq3-86rp](https://github.com/traefik/traefik/security/advisories/GHSA-6qq8-5wq3-86rp)) is not fixed correctly. The safePrefix function can be tricked to return an absolute URL.</p> <p>### Details The Traefik API [dashboard component](https://github.com/traefik/traefik/blob/master/pkg/api/dashboard/dashboard.go) tries to validate that the value of the header X-Forwarded-Prefix is a site relative path: ```go http.Redirect(resp, req, safePrefix(req)+&#34;/dashboard/&#34;, http.StatusFound) ```</p> <p>```go func safePrefix(req *http.Request) string { prefix := req.Header.Get(&#34;X-Forwarded-Prefix&#34;) if prefix == &#34;&#34; { return &#34;&#34; }</p> <p>parse, err := url.Parse(prefix) if err != nil { return &#34;&#34; }</p> <p>return parse.Path } ```</p> <p>### PoC An attacker can bypass this by sending the following payload:</p> <p>```bash curl -v &#39;http://traefik.localhost&#39; -H &#39;X-Forwarded-Prefix: %0d//a.com&#39; [...] &gt; HTTP/1.1 302 Found &gt; Location: //a.com/dashboard/ ```</p> <p>or sim…</p> https://cve.radiocsirt.org/vuln/ghsa-h924-8g65-j9wg https://cve.radiocsirt.org/vuln/opensuse-su-2024:14567-1 <p>govulncheck-vulndb-0.0.20241209T183251-1.1 on GA media</p> <p>govulncheck-vulndb-0.0.20241209T183251-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:14567-1