HAProxy 2.6.9

CPE Details

HAProxy 2.6.9
haproxy
haproxy
2.6.9
2023-02-23
12h22 +00:00
2023-02-23
18h25 +00:00
CPE NVD
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
Notifications manage

CPE Name: cpe:2.3:a:haproxy:haproxy:2.6.9:*:*:*:*:*:*:*

Informations

Vendor

haproxy

Product

haproxy

Version

2.6.9

Related CVE

Open and find in CVE List

CVE ID Published Description Score Severity
CVE-2023-45539 2023-11-27 23h00 +00:00 HAProxy before 2.8.2 accepts # as part of the URI component, which might allow remote attackers to obtain sensitive information or have unspecified other impact upon misinterpretation of a path_end rule, such as routing index.html#.png to a static server.
8.2
High
CVE-2023-40225 2023-08-09 22h00 +00:00 HAProxy through 2.0.32, 2.1.x and 2.2.x through 2.2.30, 2.3.x and 2.4.x through 2.4.23, 2.5.x and 2.6.x before 2.6.15, 2.7.x before 2.7.10, and 2.8.x before 2.8.2 forwards empty Content-Length headers, violating RFC 9110 section 8.6. In uncommon cases, an HTTP/1 server behind HAProxy may interpret the payload as an extra request.
7.2
High