Skip to content
Traefik | Version Through 3.7.11
bishopfox.com | blog | #denial-of-service | #vulnerability | #reverse-proxy | #http3 | #traefik | #timeouts
Summary
Bishop Fox found that Traefik's request read timeout is not applied to HTTP/3, letting unauthenticated clients hold upstream connections open indefinitely; releases since 2.8.2 are affected.
- Published
- Collected