CVE-2023-47633CWE-400

Uncontrolled Resource Consumption in Traefik

High · published December 4, 2023

CVSS v3.1
7.5
EPSS
1%
Percentile
69.6
In the wild
Unconfirmed
What it is

Traefik is an open source HTTP reverse proxy and load balancer. The traefik docker container uses 100% CPU when it serves as its own backend, which is an automatically generated route resulting from the Docker integration in the default configuration. This issue has been addressed in versions 2.10.6 and 3.0.0-beta5. Users are advised to upgrade. There are no known workarounds for this vulnerability.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.01269 · 69.6th percentile
Weakness
CWE-400 · Uncontrolled Resource Consumption
Published
2023-12-04T20:36Z
EPSS history
Timeline
  • 04 DEC 20:36Z
    Uncontrolled Resource Consumption in Traefik
    cvelistv5