CNNVD-202512-1667 Information

CNNVD ID

CNNVD-202512-1667

CVE-2025-66490

  • CNNVD Published: 2025-12-09

Description (Chinese)

Traefik是Traefik开源的一款开源的反向代理与负载均衡工具。 Traefik 2.11.31版本至3.6.2版本存在安全漏洞,该漏洞源于路径规范化绕过,可能导致请求绕过安全控制。

Description (English)

Traefik is an open source counter-agent and load balancing tool for Traefik open source. There is a security loophole in Traefik, versions 2.11.31 to 3.6.2, which stems from the route-regulating circumvention that may lead to requests to circumvent security controls.

Hazard Level

High

Vulnerability Type

其他

Published

2025-12-09

Last Modified

2026-02-24

References

https://github.com/traefik/traefik/releases/tag/v2.11.32 https://github.com/traefik/traefik/releases/tag/v3.6.4 https://github.com/traefik/traefik/security/advisories/GHSA-gm3x-23wp-hc2c

Patch

https://traefik.io/

Share on: