CVE-2023-45539

HAProxy before 2.8.2 accepts # as part of the URI component, which might allow remote attackers to obtain sensitive information or have unspecified ot...

Description d'origine

La description telle que publiée par la source (souvent en anglais).

HAProxy before 2.8.2 accepts # as part of the URI component, which might allow remote attackers to obtain sensitive information or have unspecified other impact upon misinterpretation of a path_end rule, such as routing index.html#.png to a static server.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

Paquets affectés

Bitnami haproxy

[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"2.8.2"}]}]

État des correctifs par distribution

Paquets corrigés publiés par chaque distribution pour cette CVE

Debian DEBIAN-CVE-2023-45539 haproxy Corrigé dans: 2.2.9-2+deb11u6

Références

web git.haproxy.org
web lists.debian.org
web lists.w3.org
web mail-archive.com
web nvd.nist.gov