Red Hat Security Advisory

RHSA-2024:10271

haproxy security update

Released 2024-11-26 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream AUS (v.8.4) haproxy-1.8.27-2.el8_4.1
Red Hat Enterprise Linux AppStream E4S (v.8.4) haproxy-1.8.27-2.el8_4.1
Red Hat Enterprise Linux AppStream TUS (v.8.4) haproxy-1.8.27-2.el8_4.1

Fixes 1 record

TI-2023-24365 CVE-2023-45539 · GHSA-79q7-m98p-qvhp

HAProxy before 2.8.2 accepts # as part of the URI component, which might allow remote…

MEDIUM 45

HAProxy before 2.8.2 accepts # as part of the URI component, which might allow remote attackers to obtain sensitive information or have unspecified other impact upon misinterpretation of a path_end rule, such as routing…

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.01514 Published 2023-11-28 Partial fix CWE-116