B1Gn0Se

**Name of the Vulnerable Software and Affected Versions** Traefik versions 3.7.0 through 3.7.7 **Description** A path traversal issue exists in the Kubernetes Ingress NGINX provider's RewriteTarget middleware, which is generated from the `nginx.ingress.kubernetes.io/rewrite-target` annotation. When an Ingress path utilizes a regex that captures attacker-controlled text without requiring a path separator, a crafted request can be rewritten to a dot-segment traversal path. Because the system forwards the request without post-replacement normalization validation, a backend that normalizes dot segments may resolve the path to a protected endpoint. This allows an attacker to bypass route-level authentication mechanisms such as BasicAuth, DigestAuth, or ForwardAuth. **Recommendations** Update to version 3.7.8.