Most recent entries from all

bdu:2024-10643

BIT-haproxy-2024-53008

Affected: Bitnami: haproxy

Inconsistent interpretation of HTTP requests ('HTTP Request/Response Smuggling') issue exists in HAProxy. If this vulnerability is exploited, a remote attacker may access a path that is restricted by ACL (Access Control List) set on the product. As a result, the attacker may obtain sensitive information.

EUVD-2026-205223

fkie_cve-2024-53008

GHSA-qq72-vh82-fwv9

jvndb-2024-000122

HAProxy HTTP/3 implementation contains an issue on accepting malformed HTTP headers. When a request including malformed HTTP headers is forwarded to a HTTP/1.1 non-compliant back-end server, it is exploited to conduct an HTTP request/response smuggling attack (CWE-444). Yuki Mogi of FFRI Security, Inc. reported this vulnerability to the developer and coordinated. After the coordination was completed, JPCERT/CC coordinated with the developer to publish this advisory in order to notify users of the solution through JVN.

OESA-2024-2545 — haproxy security update

Affected: openEuler:22.03-LTS-SP1: haproxy

HAProxy is a free, very fast and reliable solution offering high availability, load balancing, and proxying for TCP and HTTP-based applications. It is particularly suited for very high traffic web sites and powers quite a number of the world's most visited ones. Security Fix(es): Inconsistent interpretation of HTTP requests ('HTTP Request/Response Smuggling') issue exists in HAProxy. If this vulnerability is exploited, a remote attacker may access a path that is restricted by ACL (Access Control List) set on the product. As a result, the attacker may obtain sensitive information.(CVE-2024-53008)

UBUNTU-CVE-2024-53008

Affected: Ubuntu:24.04:LTS: haproxy

WID-SEC-W-2024-3560 — HAProxy: Schwachstelle ermöglicht Offenlegung von Informationen

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in HAProxy ausnutzen, um Informationen offenzulegen.