logo

Database

Lack of data validation - Path Traversal In github.com/traefik/traefik

Description

Traefik Client Plugin's Path Traversal Vulnerability Allows Arbitrary File Overwrite and Remote Code Execution in github.com/traefik/traefik

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem
Component
Affected version
Patched versions

Aliases

1. CVE-2025-543862. NVD-2025-543863. OSV-2025-543864. OSV-GO-2025-38355. GHSA-q6gg-9f92-r9wg6. GCVE-2025-543867. GHSA-q6gg-9f92-r9wg

References

1. https://github.com/traefik/traefik/security/advisories/GHSA-q6gg-9f92-r9wg2. https://github.com/traefik/plugin-service/pull/713. https://github.com/traefik/plugin-service/pull/724. https://github.com/traefik/traefik/pull/119115. https://github.com/traefik/traefik/commit/5ef853a0c53068f69a6c229a5815a0dc6e0a88006. https://github.com/traefik/traefik/releases/tag/v2.11.28

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.

FLAT-IKTK4 – Vulnerability | Fluid Attacks Database