目標達成 すべての支援者に感謝 — 100%達成しました!

目標: 1000 CNY · 調達済み: 1336 CNY

100%

Traefik 产品漏洞列表 / CVE 中文分析 45

Traefik 产品相关 45 条漏洞,AI 中文标题与摘要、CVSS、POC 一站汇总。

Traefik 是一款开源的现代化边缘路由器,本页面专注于聚合其相关的安全漏洞信息。收录内容涵盖 Traefik 历史上存在的所有已知缺陷,包括远程代码执行、权限绕过及配置错误等类型,时间跨度贯穿其版本迭代全过程。读者可通过此页追踪厂商发布的安全公告,深入了解特定类别的系统弱点,或快速检索该产品的历史漏洞记录以评估安全风险。这些信息有助于安全运维人员及时识别潜在威胁,制定针对性的防御策略,确保边缘流量处理架构的稳定与安全,避免遭受恶意利用。

ベンダー: traefik

CVE IDタイトルCVSS深刻度公開日
CVE-2025-32431 Traefik has a possible vulnerability with the path matchers CWE-22 5.9 -2025-04-21
CVE-2024-52003 X-Forwarded-Prefix Header still allows for Open Redirect in traefik CWE-601 5.3 -2024-11-29
CVE-2024-45410 HTTP client can remove the X-Forwarded headers in Traefik CWE-345 9.8 Critical2024-09-19
CVE-2024-39321 Traefik vulnerable to bypassing IP allow-lists via HTTP/3 early data requests in QUIC 0-RTT handshakes CWE-639 7.5 High2024-07-05
CVE-2024-28869 Possible denial of service vulnerability with Content-length header in Traefik CWE-755 7.5 High2024-04-12
CVE-2023-47633 Uncontrolled Resource Consumption in Traefik CWE-400 7.5 High2023-12-04
CVE-2023-47106 Incorrect processing of fragment in the URL leads to Authorization Bypass in Traefik CWE-20 4.8 Medium2023-12-04
CVE-2023-47124 Denial of service whith ACME HTTPChallenge in Traefik CWE-772 5.9 Medium2023-12-04
CVE-2023-29013 HTTP header parsing could cause a deny of service CWE-400 7.5 High2023-04-14
CVE-2022-46153 Routes exposed with an empty TLSOption in traefik CWE-295 8.1 High2022-12-08
CVE-2022-23469 Authorization header displayed in the debug logs CWE-200 3.5 Low2022-12-08
CVE-2022-39271 Traefik HTTP/2 connections management could cause a denial of service CWE-400 7.5 High2022-10-11
CVE-2022-23632 Traefik skips the router TLS configuration when the host header is an FQDN CWE-295 7.4 High2022-02-17
CVE-2021-32813 Drop Headers via Malicious Connection Header CWE-913 4.8 Medium2021-08-03
CVE-2020-15129 Open redirect in Traefik CWE-601 6.1 Medium2020-07-30

Traefik 产品累计公开 45 条 CVE 漏洞,本页提供按时间倒序的完整列表,包含 CVSS、CWE、AI 中文摘要与可获取的 POC 链接。