github.com/containous/traefik

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Feed

Medium 6.1

CVE-2020-15129

Open redirect in Traefik

In Traefik before versions 1.7.26, 2.2.8, and 2.3.0-rc3, there exists a potential open redirect vulnerability in Traefik's handling of the "X-Forwarded-Prefix" header. The Traefik API dashboard component doesn't validate that the value of the header "X-Forwar…

containous traefik github.com/traefik/traefik github.com/traefik/traefik/v2 Alpine Go

Jul 30, 2020
High 7.5

CVE-2019-20894

Improper Authentication

Traefik 2.x, in certain configurations, allows HTTPS sessions to proceed without mutual TLS verification in a situation where ERR_BAD_SSL_CLIENT_AUTH_CERT should have occurred.

github.com/traefik/traefik/v2 github.com/containous/traefik github.com/containous/traefik/v2 Go

Jul 2, 2020
Medium 5.3

CVE-2020-9321

Traefik has an Improper Certificate Handling issue

configurationwatcher.go in Traefik 2.x before 2.1.4 and TraefikEE 2.0.0 mishandles the purging of certificate contents from providers before logging.

github.com/traefik/traefik github.com/containous/traefik/v2 github.com/containous/traefik Go

Mar 16, 2020