traefik vulnerabilities (openSUSE)
75 vulnerabilities.
-
traefikopenSUSE Traefik before 2.11.58 and 3.7.13 mTLS Bypass via Negated Host Matcher 6.9 Medium -
traefikopenSUSE Traefik before 2.11.58 and 3.7.14 TLS Config Bypass via NTLM/Kerberos Round Tripper 7.0 High -
traefikopenSUSE Traefik before 2.11.58 and 3.7.14 Race Condition in NTLM/Kerberos Round Tripper 6.3 Medium -
traefikopenSUSE Traefik v3.7.0 before v3.7.14 mTLS Header Spoofing via Ingress-NGINX HTTP Router 7.0 High -
traefikopenSUSE Traefik before 2.11.58 and 3.7.14 Authentication Bypass via Negotiate Connection Pool 7.0 High -
traefikopenSUSE Traefik v3.7.0 before v3.7.14 Client CA Mix-up via auth-tls-secret Name Collision 7.0 High -
traefikopenSUSE Traefik v3.2.0 before v3.7.14 FastProxy NTLM/Negotiate Connection Pool Identity Leak 7.0 High -
traefikopenSUSE Traefik v3.7.13 Authentication Bypass via ssl-passthrough Ingress HTTP Router 7.0 High -
traefikopenSUSE Traefik before v2.11.58 and v3.7.14 SNI Check Bypass via HTTP/2 Scheme 7.0 High -
traefikopenSUSE Traefik: BasicAuth singleflight coalescing reintroduces an unauthenticated username-enumeration timing oracle 6.3 Medium -
traefikopenSUSE Traefik: Rootless HTTP/1 request-target routes as "/" but is forwarded verbatim, bypassing path-scoped routing, middleware guards and access logging 8.8 High -
traefikopenSUSE Traefik: Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') and Incorrect Authorization 7.0 High -
traefikopenSUSE Traefik HTTP/3 Backend NTLM Connection Reuse 9.1 Critical -
traefikopenSUSE Traefik entrypoint header-name sanitization bypassed via request trailers 7.0 High -
traefikopenSUSE Traefik: headerField underscore-variant identity spoofing in BasicAuth / DigestAuth / ForwardAuth 7.8 High -
traefikopenSUSE Traefik: Gateway HTTPRoute backendRef filters can leak backend context across routes sharing a Service:port 6.3 Medium -
traefikopenSUSE ForwardAuth middleware leaks X-Forwarded-Port spoofing via untrusted X-Forwarded-Proto when trustForwardHeader=false 6.9 Medium -
traefikopenSUSE Traefik Kubernetes Ingress NGINX provider fails open when auth-secret resolution fails 5.9 Medium -
traefikopenSUSE Traefik: Kubernetes Gateway crossProviderNamespaces bypass allows HTTPRoute outside the allowlist to expose internal Traefik services 6.0 Medium -
traefikopenSUSE Traefik: HTTP/3 mTLS bypass via exact SNI TLSOptions lookup for wildcard and mixed-case hosts 7.8 High -
traefikopenSUSE Traefik: SNICheck ignores wildcard TLSOptions mappings, allowing domain-fronted mTLS bypass 7.8 High -
traefikopenSUSE Traefik StripPrefix Route-Level Auth Bypass via Path Normalization 7.8 High -
traefikopenSUSE Traefik: Gateway API TraefikService backend accepts rest@internal, allowing unauthorized exposure of the REST provider despite providers.rest.insecure=false 6.4 Medium -
traefikopenSUSE Traefik: Errors middleware forwards Authorization and Cookie headers to separate error page service 6.9 Medium -
traefikopenSUSE Traefik: BasicAuth middleware: timing side-channel vulnerability 6.3 Medium -
traefikopenSUSE Traefik Kubernetes CRD allows unauthorized cross-namespace middleware binding 4.8 Medium -
traefikopenSUSE Traefik: StripPrefixRegex auth bypass via Path/RawPath desync 7.8 High -
traefikopenSUSE Traefik: Forwarded alias spoofing top pre-auth decision bypass 7.8 High -
traefikopenSUSE Traefik: ForwardAuth trustForwardHeader=false allows spoofed X-Forwarded-Prefix to bypass auth 7.8 High -
traefikopenSUSE Go JOSE affect by a panic in JWE decryption 7.5 High -
traefikopenSUSE Traefik has Knative Ingress Rule Injection that Allows Host Restriction Bypass 6.3 Medium -
traefikopenSUSE Traefik: BasicAuth Middleware Timing Attack Allows Username Enumeration 6.3 Medium -
traefikopenSUSE Traefik mTLS bypass via fragmented ClientHello SNI extraction failure 7.8 High -
traefikopenSUSE gRPC-Go has an authorization bypass via missing leading slash in :path 9.1 Critical -
traefikopenSUSE Traefik has a kubernetes gateway rule injection via unescaped backticks in HTTPRoute match values 6.1 Medium -
traefikopenSUSE Traefik: lowercase `Connection` tokens can delete traefik-managed forwarded identity headers (for example, `X-Real-Ip`) 7.5 High -
traefikopenSUSE Traefik: tcp router clears read deadlines before tls forwarding, enabling stalled handshakes (slowloris doS) 7.5 High -
traefikopenSUSE Traefik: unbounded io.ReadAll on auth server response body causes OOM denial of service(DOS) 4.4 Medium -
traefikopenSUSE Sending certain HTTP/2 frames can cause a server to panic in golang.org/x/net 7.5 High -
traefikopenSUSE Traefik: TCP readTimeout bypass via STARTTLS on Postgres 7.5 High -
traefikopenSUSE Traefik's ACME TLS-ALPN fast path lacks timeouts and close on handshake stall 5.9 Medium -
traefikopenSUSE Traefik has Inverted TLS Verification Logic in its ingress-nginx Provider 5.9 Medium -
traefikopenSUSE Traefik doesn't Prevent Path Normalization Bypass in Router + Middleware Rules 6.9 Medium -
traefikopenSUSE Unbounded memory consumption in golang.org/x/crypto/ssh 5.3 Medium -
traefikopenSUSE Traefik allows path traversal using url encoding 2.9 Low -
traefikopenSUSE Incorrect Neutralization of Input During Web Page Generation in x/net in golang.org/x/net 6.5 Medium -
traefikopenSUSE jwt-go allows excessive memory allocation during header parsing 7.5 High -
traefikopenSUSE Potential denial of service in golang.org/x/crypto 7.5 High -
traefikopenSUSE Unexpected memory consumption during token parsing in golang.org/x/oauth2 7.5 High -
traefikopenSUSE Go JOSE's Parsing Vulnerable to Denial of Service 6.6 Medium - Show olderLoading…