/
DirectorySecurity AdvisoriesPricing
Sign in
Security Advisories

CVE-2024-52003

Published

Last updated

NVD

https://nvd.nist.gov/vuln/detail/CVE-2024-52003

Severity

Unknown

Summary

X-Forwarded-Prefix Header still allows for Open Redirect in traefik

Description

Traefik (pronounced traffic) is an HTTP reverse proxy and load balancer. There is a vulnerability in Traefik that allows the client to provide the X-Forwarded-Prefix header from an untrusted source. This issue has been addressed in versions 2.11.14 and 3.2.1. Users are advised to upgrade. There are no known workarounds for this vulnerability.

References

Affected packages


The trusted source for open source

Talk to an expert
© 2025 Chainguard. All Rights Reserved.
PrivacyTerms

Product

Chainguard ContainersChainguard LibrariesChainguard VMsIntegrationsPricing