Known vulnerabilities in Traefik - page 3

Vendor: Containous
Software: Traefik
Software CPE: cpe:2.3:a:containous:traefik:*:*:*:*:*:*:*:*
Total vulnerabilities: 63
Public exploits: 2
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Traefik Traefik is affected by 63 known vulnerabilities: 13 high, 33 medium, 17 low Critical High Medium Low

Vulnerabilities (63)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU129661 - Insufficient Verification of Data Authenticity
CVE-2024-45410
CWE-345 High
No
No
2.11.9, 3.1.3 19.09.2024 SB2024091971
SB2026050538
#VU93811 - Security Features
CVE-2024-39321
CWE-254 Medium
No
No
2.11.6, 3.0.4 05.07.2024 SB2024070515
#VU91723 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2024-35255
CWE-362 Low
No
No
2.11.5, 3.0.3 11.06.2024 SB20240611248
SB2024091320
SB2024091965
and 15 more
#VU91160 - Improper input validation
CVE-2024-24790
CWE-20 Medium
No
No
2.11.4, 3.0.2 05.06.2024 SB2024060520
SB2024060635
SB2024060729
and 90 more
#VU89295 - Untrusted Search Path
CVE-2024-24787
CWE-426 Medium
No
No
2.11.3, 3.0.1 09.05.2024 SB2024050936
SB2024050937
SB2024050938
and 12 more
#VU88546 - Improper input validation
CVE-2024-28869
CWE-20 Medium
No
No
2.11.2, 3.0.0 rc5 16.04.2024 SB2024041603
#VU88184 - Resource exhaustion
CVE-2023-45288
CWE-400 Medium
Available
No
2.11.2 05.04.2024 SB2024040533
SB2024040549
SB2024040551
and 189 more
#VU83639 - Resource exhaustion
CVE-2023-47633
CWE-400 Medium
No
No
2.10.6 04.12.2023 SB2023120410
#VU83638 - Improper Authorization
CVE-2023-47106
CWE-285 Medium
No
No
2.10.6 04.12.2023 SB2023120410
#VU83636 - Improper Resource Locking
CVE-2023-47124
CWE-413 Medium
No
No
2.10.6 04.12.2023 SB2023120410
#VU82064 - Resource exhaustion
CVE-2023-39325
CWE-400 Medium
No
No
2.10.5 16.10.2023 SB2023101651
SB2023101652
SB2023101653
and 341 more
#VU81728 - Resource exhaustion
CVE-2023-44487
CWE-400 High
Available
Exploited
2.10.5 10.10.2023 SB2023101023
SB2023101024
SB2023101037
and 650 more
#VU74624 - Improper input validation
CVE-2023-29013
CWE-20 Medium
No
No
2.9.10 10.04.2023 SB2023041028
SB2023060126
SB2023090130
#VU72299 - Integer overflow
CVE-2022-4172
CWE-190 Medium
No
No
2.9.8 15.02.2023 SB2023021573
SB2023021574
SB2023050972
and 6 more
#VU71249 - Improper input validation
CVE-2022-39271
CWE-20 Medium
No
No
2.8.8 17.01.2023 SB2023011770
SB20230418137
SB2022101035
#VU70066 - Improper Certificate Validation
CVE-2022-46153
CWE-295 High
No
No
2.9.6 08.12.2022 SB2022120844
SB2023071939
#VU70062 - Exposure of sensitive information to an unauthorized actor
CVE-2022-23469
CWE-200 Medium
No
No
2.9.6 08.12.2022 SB2022120844
#VU65457 - Cryptographic Issues
CVE-2022-23632
CWE-310 Medium
No
No
2.6.1 19.07.2022 SB2022071937
SB20221018109
SB2022071981
#VU129660 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2021-32813
CWE-444 Low
No
No
2.4.13 03.08.2021 SB2021080346
#VU34124 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2020-15129
CWE-601 Low
No
No
1.7.26, 2.2.8, 2.3.0 rc3 30.07.2020 SB2020073044


Showing elements 41 - 60 out of 63