logo

Database

Lack of data validation In github.com/traefik/traefik

Description

Traefik incorrectly processes fragment in the URL, leads to Authorization Bypass in github.com/traefik/traefik

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem
Component
Affected version
Patched versions

Aliases

1. CVE-2023-471062. NVD-2023-471063. OSV-GO-2023-23764. OSV-2023-471065. GHSA-fvhj-4qfh-q2hm6. GCVE-2023-471067. GHSA-fvhj-4qfh-q2hm

References

1. https://datatracker.ietf.org/doc/html/rfc7230#section-5.3.12. https://github.com/traefik/traefik/releases/tag/v2.10.63. https://github.com/traefik/traefik/releases/tag/v3.0.0-beta54. https://github.com/traefik/traefik/security/advisories/GHSA-fvhj-4qfh-q2hm

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.