HAProxy before 2.8.2 accepts # as part of the URI component, which might allow remote attackers to obtain sensitive information or have unspecified other impact upon misinterpretation of a path_end rule, such as routing index.html#.png to a static server.
CVSS Details
- CVSS 3.1 Base Score: 8.2
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | alma-upgrade-haproxy | Mar 8, 2024 | Nov 28, 2023 | |
| Alpine Linux | alpine-linux-upgrade-haproxy | Mar 21, 2024 | Nov 28, 2023 | |
| Amazon Linux Ami 2 | amazon-linux-ami-2-upgrade-haproxy2amazon-linux-ami-2-upgrade-haproxy2-debuginfo | Jan 10, 2024 | Nov 28, 2023 | |
| Amazon_linux_2023 | amazon-linux-2023-upgrade-haproxyamazon-linux-2023-upgrade-haproxy-debuginfoamazon-linux-2023-upgrade-haproxy-debugsource | Feb 17, 2025 | Nov 28, 2023 | |
| Debian | debian-upgrade-haproxy | Dec 19, 2023 | Nov 28, 2023 | |
| Huawei Euleros 2_0_sp10 | huawei-euleros-2_0_sp10-upgrade-haproxy | Mar 13, 2024 | Nov 28, 2023 | |
| Huawei Euleros 2_0_sp11 | huawei-euleros-2_0_sp11-upgrade-haproxy | Jan 29, 2024 | Nov 28, 2023 | |
| Huawei Euleros 2_0_sp8 | huawei-euleros-2_0_sp8-upgrade-haproxy | Jul 23, 2024 | Nov 28, 2023 | |
| Huawei Euleros 2_0_sp9 | huawei-euleros-2_0_sp9-upgrade-haproxy | Feb 12, 2024 | Nov 28, 2023 | |
| Oracle_linux | — | oracle-linux-upgrade-haproxy | Mar 6, 2024 | Nov 28, 2023 |
| Redhat Openshift | linuxrpm-upgrade-haproxy | Aug 1, 2024 | Nov 28, 2023 | |
| Redhat_linux | redhat-upgrade-haproxyredhat-upgrade-haproxy-debuginforedhat-upgrade-haproxy-debugsource | Mar 6, 2024 | Nov 28, 2023 | |
| Rocky_linux | rocky-upgrade-haproxyrocky-upgrade-haproxy-debuginforocky-upgrade-haproxy-debugsource | Nov 19, 2024 | Nov 28, 2023 | |
| Suse | — | suse-upgrade-haproxy | Dec 7, 2023 | Nov 28, 2023 |
| Ubuntu | ubuntu-pro-upgrade-haproxyubuntu-upgrade-haproxy | Dec 6, 2023 | Nov 28, 2023 | |
| Vmware Photon_os | vmware-photon_os_update_tdnf | Jan 20, 2025 | Nov 28, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub