onyx --cves cve-2023-47124
CVE-2023-47124
- score
- <0.1
- cvss
- 5.9
- epss
- 0.8%
- published
- 2023-12-04
- kev added
- —
- first seen
Traefik < 2.10.6, 3.0.0-beta5 contains a slowloris attack caused by delay in solving HTTPChallenge, letting attackers exhaust server resources, exploit requires attacker to send slow HTTP requests.
Timeline
How this CVE moved toward exploitation. Chart: last 30 days — trend score, EPSS, community mentions per day; hover the event lane.
- Published
- Tracked by Onyx
Weaknesses
References 8
- ttps://www.cloudflare.com/learning/ddos/ddos-attack-tools/slowloris/
- https://doc.traefik.io/traefik/https/acme/#dnschallenge
- https://doc.traefik.io/traefik/https/acme/#httpchallenge
- https://doc.traefik.io/traefik/https/acme/#tlschallenge
- https://github.com/traefik/traefik/releases/tag/v2.10.6
- https://github.com/traefik/traefik/releases/tag/v3.0.0-beta5
- https://github.com/traefik/traefik/security/advisories/GHSA-8g85-whqh-cr2f
- https://www.cloudflare.com/learning/ddos/ddos-attack-tools/slowloris