Servers and applications
CVE-2024-45410
Traefik is a golang, Cloud Native Application Proxy. When a HTTP request is processed by Traefik, certain HTTP headers such as X-Forwarded-Host or X-Forwarded-Port are added by Traefik before the request is routed to the application. For a HTTP client, it should not be possible to remove or modify these headers. Since the application trusts the value of these headers, security implications might…
- Severity
- High 7.5
- Published
- 19 Sept 2024
- Last changed
- 17 Jun 2026
- Added to UpHeron
- 1 Nov 2026
- Fixed in
- 2.11.9, 3.1.3
- Sources
- NVD
Affected software
| Software | Affected versions |
|---|---|
TraefikServers and applications · cpe:a:traefik:traefik |
|