CVE-2024-52003
published 2024-11-29CVE-2024-52003: Traefik (pronounced traffic) is an HTTP reverse proxy and load balancer. There is a vulnerability in Traefik that allows the client to provide the…
PriorityP428medium6.1CVSS 3.1
AVNACLPRNUIRSCCLILAN
EPSS
0.39%
30.7th percentile
Traefik (pronounced traffic) is an HTTP reverse proxy and load balancer. There is a vulnerability in Traefik that allows the client to provide the X-Forwarded-Prefix header from an untrusted source. This issue has been addressed in versions 2.11.14 and 3.2.1. Users are advised to upgrade. There are no known workarounds for this vulnerability.
Affected
5 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| github.com | traefik_traefik_v2 | >= 0 < 2.11.14 | 2.11.14 |
| github.com | traefik_traefik_v3 | >= 0 < 3.2.1 | 3.2.1 |
| traefik | traefik | < 2.11.14 | 2.11.14 |
| traefik | traefik | — | — |
| traefik | traefik | >= 3.0.0 < 3.2.1 | 3.2.1 |
CVSS provenance
nvdv3.16.1MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
nvdv4.06.3MEDIUMCVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
OSV
Traefik's X-Forwarded-Prefix Header still allows for Open Redirect
osv·2024-12-02
CVE-2024-52003 [MEDIUM] Traefik's X-Forwarded-Prefix Header still allows for Open Redirect
Traefik's X-Forwarded-Prefix Header still allows for Open Redirect
### Impact
There is a vulnerability in Traefik that allows the client to provide the `X-Forwarded-Prefix` header from an untrusted source.
### Patches
- https://github.com/traefik/traefik/releases/tag/v2.11.14
- https://github.com/traefik/traefik/releases/tag/v3.2.1
### Workarounds
No workaround.
### For more information
If you have any questions or comments about this advisory, please [open an issue](https://github.com/traefik/traefik/issues).
Original Description
### Summary
The previously reported open redirect ([GHSA-6qq8-5wq3-86rp](https://github.com/traefik/traefik/security/advisories/GHSA-6qq8-5wq3-86rp)) is not fixed correctly. The safePrefix function can be tricked to return an absolute URL.
### Details
OSV
Traefik's X-Forwarded-Prefix Header still allows for Open Redirect in github.com/traefik/traefik
osv·2024-12-02
CVE-2024-52003 Traefik's X-Forwarded-Prefix Header still allows for Open Redirect in github.com/traefik/traefik
Traefik's X-Forwarded-Prefix Header still allows for Open Redirect in github.com/traefik/traefik
Traefik's X-Forwarded-Prefix Header still allows for Open Redirect in github.com/traefik/traefik
GHSA
Traefik's X-Forwarded-Prefix Header still allows for Open Redirect
ghsa·2024-12-02
CVE-2024-52003 [MEDIUM] CWE-601 Traefik's X-Forwarded-Prefix Header still allows for Open Redirect
Traefik's X-Forwarded-Prefix Header still allows for Open Redirect
### Impact
There is a vulnerability in Traefik that allows the client to provide the `X-Forwarded-Prefix` header from an untrusted source.
### Patches
- https://github.com/traefik/traefik/releases/tag/v2.11.14
- https://github.com/traefik/traefik/releases/tag/v3.2.1
### Workarounds
No workaround.
### For more information
If you have any questions or comments about this advisory, please [open an issue](https://github.com/traefik/traefik/issues).
Original Description
### Summary
The previously reported open redirect ([GHSA-6qq8-5wq3-86rp](https://github.com/traefik/traefik/security/advisories/GHSA-6qq8-5wq3-86rp)) is not fixed correctly. The safePrefix function can be tricked to return an absolute URL.
### Details
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2024-11-29
Published