The probability is the direct output of the EPSS model, and conveys an overall sense of the threat of exploitation in the wild. The percentile measures the EPSS probability relative to all known EPSS scores. Note: This data is updated daily, relying on the latest available EPSS model version. Check out the EPSS documentation for more details.
In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.
Test your applicationsUpgrade github.com/traefik/traefik/v3/pkg/types
to version 1.7.12 or higher.
Affected versions of this package are vulnerable to Insufficiently Protected Credentials when the --api
flag is used and the API is publicly reachable and exposed without sufficient access control (which is contrary to the API documentation). It allows remote authenticated users to discover password hashes by reading the Basic HTTP Authentication or Digest HTTP Authentication section, or discover a key by reading the ClientTLS section. These can be found in the JSON response to a /api
request.