CyberRota Analysis
AI-GeneratedTraefik versions prior to 2.11.57 and 3.7.13 are vulnerable due to improper handling of rootless HTTP/1 request targets, which can lead to cross-vhost routing bypass, path-scoped authorization bypass, and access-log evasion. This vulnerability poses a significant risk to environments relying on Traefik for secure routing and load balancing, particularly those with complex backend configurations. Organizations using affected versions should prioritize immediate updates to mitigate potential exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Traefik is an open source HTTP reverse proxy and load balancer. Prior to 2.11.57, and 3.7.13, Traefik accepts a rootless HTTP/1 request target that Go stores in URL.Opaque while leaving URL.Path empty. The rewriteRequestBuilder path evaluates routing, path sanitization, forwardAuth, encodedCharacters, and access logging against a path normalized to / but forwards URL.Opaque verbatim to the backend, allowing cross-vhost routing bypass, path-scoped authorization bypass, and access-log evasion when the backend interprets the opaque target as a path. This issue is fixed in 2.11.57 and 3.7.13.
Related CVEs
Other vulnerabilities affecting the same vendor(s)