tocsin

CVE-2024-45410

6 advisories.

Go/github.com/traefik/traefik/v3 CVE-2024-45410: high 7.5, EPSS 1.51%

HTTP client can manipulate custom HTTP headers that are added by Traefik

Action: Upgrade github.com/traefik/traefik/v3 to 3.1.3 or later.

go get github.com/traefik/traefik/v3@v3.1.3

Affected

introducedfixedlast affected
3.0.0-beta33.1.3-

Fixed versions

3.1.3

Sources

CVE-2024-45410 · published · modified · JSON

Go/github.com/traefik/traefik/v2 CVE-2024-45410: high 7.5, EPSS 1.51%

HTTP client can manipulate custom HTTP headers that are added by Traefik

Action: Upgrade github.com/traefik/traefik/v2 to 2.11.9 or later.

go get github.com/traefik/traefik/v2@v2.11.9

Affected

introducedfixedlast affected
02.11.9-

Fixed versions

2.11.9

Sources

CVE-2024-45410 · published · modified · JSON

Go/github.com/traefik/traefik CVE-2024-45410: high 7.5, EPSS 1.51%

HTTP client can manipulate custom HTTP headers that are added by Traefik

Action: Upgrade github.com/traefik/traefik to 2.11.9 or later.

go get github.com/traefik/traefik@v2.11.9

Affected

introducedfixedlast affected
02.11.9-

Fixed versions

2.11.9

Sources

CVE-2024-45410 · published · modified · JSON

Go/github.com/traefik/traefik CVE-2024-45410: unknown, EPSS 1.51%

HTTP client can manipulate custom HTTP headers that are added by Traefik in github.com/traefik/traefik

Action: No fix published. Pin and monitor.

Affected

introducedfixedlast affected
0--

Fixed versions

No fixed version in the source.

Sources

CVE-2024-45410 · published · modified · JSON

Go/github.com/traefik/traefik/v2 CVE-2024-45410: unknown, EPSS 1.51%

HTTP client can manipulate custom HTTP headers that are added by Traefik in github.com/traefik/traefik

Action: Upgrade github.com/traefik/traefik/v2 to 2.11.9 or later.

go get github.com/traefik/traefik/v2@v2.11.9

Affected

introducedfixedlast affected
02.11.9-

Fixed versions

2.11.9

Sources

CVE-2024-45410 · published · modified · JSON

Go/github.com/traefik/traefik/v3 CVE-2024-45410: unknown, EPSS 1.51%

HTTP client can manipulate custom HTTP headers that are added by Traefik in github.com/traefik/traefik

Action: Upgrade github.com/traefik/traefik/v3 to 3.1.3 or later.

go get github.com/traefik/traefik/v3@v3.1.3

Affected

introducedfixedlast affected
3.0.0-beta33.1.3-

Fixed versions

3.1.3

Sources

CVE-2024-45410 · published · modified · JSON