Traefik before 2.4.5 allows the loading of IFRAME elements from other domains.
References
Link | Resource |
---|---|
https://github.com/traefik/traefik/pull/7904 | Patch Third Party Advisory |
https://github.com/traefik/traefik/releases/tag/v2.4.5 | Release Notes |
Configurations
Information
Published : 2021-02-17 19:15
Updated : 2022-07-12 10:42
NVD link : CVE-2021-27375
Mitre link : CVE-2021-27375
JSON object : View
CWE
CWE-1021
Improper Restriction of Rendered UI Layers or Frames
Products Affected
containous
- traefik