漏洞描述
Traefik before 1.7.26, 2.2.8, and 2.3.0-rc3 contains an open redirect vulnerability in the X-Forwarded-Prefix header. An attacker can redirect a user to a malicious site and possibly obtain sensitive information, modify data, and/or execute unauthorized operations.
影响产品
修复建议
建议关注厂商安全公告，及时升级至已修复版本，并结合实际资产暴露情况采取缓解措施。
参考链接
securitylab.github.comhttps://securitylab.github.com/advisories/GHSL-2020-140-Containous-Traefik↗github.comhttps://github.com/containous/traefik/releases/tag/v2.2.8↗github.comhttps://github.com/containous/traefik/pull/7109↗github.comhttps://github.com/containous/traefik/security/advisories/GHSA-6qq8-5wq3-86rp↗nvd.nist.govhttps://nvd.nist.gov/vuln/detail/CVE-2020-15129↗