github.com
https://github.com/traefik/traefik CVE-2025-47952
LOW
Traefik allows path traversal using url encoding
Record summary
CVE-2025-47952 has a selected CVSS score of 2.9 (low).
Description
Traefik (pronounced traffic) is an HTTP reverse proxy and load balancer. Prior to versions 2.11.25 and 3.4.1, there is a potential vulnerability in Traefik managing the requests using a PathPrefix, Path or PathRegex matcher. When Traefik is configured to route the requests to a backend using a matcher based on the path, if the URL contains a URL encoded string in its path, it’s possible to target a backend, exposed using another router, by-passing the middlewares chain. This issue has been patched in versions 2.11.25 and 3.4.1.
Description source: CVE List
Exploitation context
CISA SSVC decision
ExploitationNone
AutomatableYes
Technical impactPartial
CISA Coordinator · SSVC 2.0.3 · Evaluated May 30, 2025 · Source: CVE List
Affected products and versions
4| Product | Source | Version range | Status |
|---|---|---|---|
traefikBrowse traefik / traefik | CVE List | < 3.4.1 | affected |
| < 2.11.25 | affected | ||
github.com/traefik/traefikBrowse Go / github.com/traefik/traefik | GitHub Advisory | Through 1.7.34 | affected |
github.com/traefik/traefik/v2Browse Go / github.com/traefik/traefik/v2 | GitHub Advisory | Before 2.11.25 · Fixed in 2.11.25 | affected |
github.com/traefik/traefik/v3Browse Go / github.com/traefik/traefik/v3 | GitHub Advisory | Before 3.4.1 · Fixed in 3.4.1 | affected |
References
6github.com
https://github.com/traefik/traefik/commit/08d5dfee0164aa54dd44a467870042e18e8d3f00 github.com
https://github.com/traefik/traefik/releases/tag/v2.11.25 github.com
https://github.com/traefik/traefik/releases/tag/v3.4.1 github.comConfirmation
https://github.com/traefik/traefik/security/advisories/GHSA-vrch-868g-9jx5 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2025-47952