PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Traefik | Version Through 3.7.11

bishopfox.com | blog | #denial-of-service | #vulnerability | #reverse-proxy | #http3 | #traefik | #timeouts
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Bishop Fox found that Traefik's request read timeout is not applied to HTTP/3, letting unauthenticated clients hold upstream connections open indefinitely; releases since 2.8.2 are affected.
Published
Collected

Related coverage

research · portswigger.net
HTTP/3 connection contamination: an upcoming threat?
First-request routing plus browser connection coalescing enables HTTP connection contamination: XSS on one hostname can compromise another sharing the connection — a threat set to grow with HTTP/3.
blog · bishopfox.com
SonicWall Sonicos Versions 7.1.x and 8.0.x
Bishop Fox found an unauthenticated DoS in SonicWall's SSL VPN (CVE-2025-32818): crafted API requests crash and reboot NSv appliances, taking the VPN offline. Patch to 7.2.0/8.0.1 or disable it.
blog · bishopfox.com
Zilliz / Attu | 2.6.5
Bishop Fox disclosed two flaws in Zilliz Attu 2.6.5, the Milvus management UI. An unauthenticated SSRF combined with a regex validation bypass chains into Kubernetes namespace takeover, exposing entire clusters to attackers.
blog · bishopfox.com
From Dial Tone to Throne: IVR Testing in the Spirit of The King of NYNEX
IVR systems are an under-tested attack surface: Bishop Fox covers phone-tree pentesting — account and PIN enumeration, call-flooding DoS, data disclosure — plus steps to harden voice response systems.
blog · bishopfox.com
h2c Smuggling: Request Smuggling Via HTTP/2 Cleartext (h2c)
Jake Miller demonstrates how upgrading HTTP/1.1 connections to HTTP/2 cleartext (h2c) can smuggle requests past reverse proxy access controls and establish long-lived back-end access.
blog · bishopfox.com
CA Single Sign-On Software Update: Stay Secure
Mike Brooks found two high-risk vulnerabilities in CA Single Sign-On (formerly SiteMinder) enabling denial-of-service and access to sensitive user data; CA shipped a defense-in-depth patch.
Back