onyx --cves cve-2024-28869
CVE-2024-28869
- score
- <0.1
- cvss
- 7.5
- epss
- 1.0%
- published
- 2024-04-12
- kev added
- —
- first seen
Traefik contains a denial of service caused by indefinite hang when sending a GET request with 'Content-length' header, letting attackers cause service disruption, exploit requires sending crafted request.
Timeline
How this CVE moved toward exploitation. Chart: last 30 days — trend score, EPSS, community mentions per day; hover the event lane.
- Published
- Tracked by Onyx
Weaknesses
References 5
- https://doc.traefik.io/traefik/routing/entrypoints/#respondingtimeouts
- https://github.com/traefik/traefik/commit/240b83b77351dfd8cadb91c305b84e9d22e0f9c6
- https://github.com/traefik/traefik/releases/tag/v2.11.2
- https://github.com/traefik/traefik/releases/tag/v3.0.0-rc5
- https://github.com/traefik/traefik/security/advisories/GHSA-4vwx-54mw-vqfw