Skip to content
Threat Feed
Subscribe

CPE

Cpe:2.3:a:traefik:traefik:3.7.0:ea3:*:*:*:*:*:*

1 brief RSS
high advisory

Traefik ForwardAuth Authentication Bypass via Header Spoofing

Traefik's `ForwardAuth` and snippet-based authentication middleware has a high severity authentication bypass vulnerability because it does not sanitize header aliases with underscores, allowing attackers to spoof trust context and bypass authentication on protected routes.

PoC Traefik +1 authentication-bypass header-injection forwarded-headers
2r 1t 2c updated