IT-Sentinel

« BACK_TO_HOME

PUBLISHED

2024-11-29 19:15

MODIFIED

2024-11-29 19:15

EPSS (Prob. Exploit)

0.42%

Top 63.1%

DATA SOURCES:

NVD 🔗 2025-10-18 CVE PROJECT 🔗 2026-01-19 FIRST EPSS 🔗 2026-11-08 GITHUB 🔗 2026-11-11 OSV 🔗 2026-11-08

> DESCRIPTION

Traefik (pronounced traffic) is an HTTP reverse proxy and load balancer. There is a vulnerability in Traefik that allows the client to provide the X-Forwarded-Prefix header from an untrusted source. This issue has been addressed in versions 2.11.14 and 3.2.1. Users are advised to upgrade. There are no known workarounds for this vulnerability.

> AFFECTED_PRODUCTS

ℹ️ Aucun produit affecté n'a encore été publié par NVD pour cette CVE.

> GITHUB SECURITY ADVISORY

GHSA-h924-8g65-j9wg MODERATE

Traefik's X-Forwarded-Prefix Header still allows for Open Redirect

AFFECTED PACKAGES:

GO / github.com/traefik/traefik/v3

< 3.2.1

Fixed in: 3.2.1

GO / github.com/traefik/traefik/v2

< 2.11.14

Fixed in: 2.11.14

> OSV (GOOGLE OPEN SOURCE VULNERABILITIES)

X-Forwarded-Prefix Header still allows for Open Redirect in traefik

AFFECTED PACKAGES:

Unknown / Unknown

238 versions affected

ALIASES:

GHSA-h924-8g65-j9wg, GO-2024-3299

> HISTORIQUE DES MODIFICATIONS

Première apparition

29/11/2024 19:15

Source: NVD

📊 ENRICHISSEMENT 18/10/2025 14:57

CVEPROJECT

Champ modifié: CVE Project

Ancienne valeur:

Non

Nouvelle valeur:

Oui