tocsin

CVE-2023-47106

5 advisories.

Go/github.com/traefik/traefik/v2 CVE-2023-47106: medium 6.5, EPSS 0.63%

Traefik incorrectly processes fragment in the URL, leads to Authorization Bypass

Action: Upgrade github.com/traefik/traefik/v2 to 2.10.6 or later.

go get github.com/traefik/traefik/v2@v2.10.6

Affected

introducedfixedlast affected
02.10.6-

Fixed versions

2.10.6

Sources

CVE-2023-47106 · published · modified · JSON

Go/github.com/traefik/traefik/v3 CVE-2023-47106: medium 6.5, EPSS 0.63%

Traefik incorrectly processes fragment in the URL, leads to Authorization Bypass

Action: Upgrade github.com/traefik/traefik/v3 to 3.0.0-beta5 or later.

go get github.com/traefik/traefik/v3@v3.0.0-beta5

Affected

introducedfixedlast affected
03.0.0-beta5-

Fixed versions

3.0.0-beta5

Sources

CVE-2023-47106 · published · modified · JSON

Go/github.com/traefik/traefik CVE-2023-47106: unknown, EPSS 0.63%

Traefik incorrectly processes fragment in the URL, leads to Authorization Bypass in github.com/traefik/traefik

Action: No fix published. Pin and monitor.

Affected

introducedfixedlast affected
0--

Fixed versions

No fixed version in the source.

Sources

CVE-2023-47106 · published · modified · JSON

Go/github.com/traefik/traefik/v2 CVE-2023-47106: unknown, EPSS 0.63%

Traefik incorrectly processes fragment in the URL, leads to Authorization Bypass in github.com/traefik/traefik

Action: Upgrade github.com/traefik/traefik/v2 to 2.10.6 or later.

go get github.com/traefik/traefik/v2@v2.10.6

Affected

introducedfixedlast affected
02.10.6-

Fixed versions

2.10.6

Sources

CVE-2023-47106 · published · modified · JSON

Go/github.com/traefik/traefik/v3 CVE-2023-47106: unknown, EPSS 0.63%

Traefik incorrectly processes fragment in the URL, leads to Authorization Bypass in github.com/traefik/traefik

Action: Upgrade github.com/traefik/traefik/v3 to 3.0.0-beta5 or later.

go get github.com/traefik/traefik/v3@v3.0.0-beta5

Affected

introducedfixedlast affected
03.0.0-beta5-

Fixed versions

3.0.0-beta5

Sources

CVE-2023-47106 · published · modified · JSON