CyberRota Analysis
AI-GeneratedTraefik's ForwardAuth middleware is vulnerable to an attack that allows unauthenticated remote attackers to manipulate the X-Forwarded-Port header, potentially bypassing port-based authorization checks. This flaw affects versions prior to v2.11.51, v3.6.22, and v3.7.6, and could lead to unauthorized access to protected services. Organizations using affected versions should prioritize upgrading to the patched releases to mitigate this risk.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Traefik is an HTTP reverse proxy and load balancer. Prior to v2.11.51, v3.6.22, and v3.7.6, Traefik's ForwardAuth middleware, even when configured with trustForwardHeader: false, derives the X-Forwarded-Port header sent to the authentication service from the original incoming request instead of the sanitized forwarded request. As a result, an unauthenticated remote attacker can inject an X-Forwarded-Proto: https header over a plain HTTP connection and cause Traefik to forward X-Forwarded-Port: 443 to the authentication service, bypassing port-based authorization checks. This issue is fixed in versions v2.11.51, v3.6.22, and v3.7.6.
Related CVEs
Other vulnerabilities affecting the same vendor(s)