Msrc Cbl2 Haproxy 2.4.22-1 On Cbl Mariner 2.0 vulnerabilities

1 known vulnerability affecting msrc/cbl2_haproxy_2.4.22-1_on_cbl_mariner_2.0.

Total CVEs
1
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
CRITICAL1

Vulnerabilities

Page 1 of 1
CVE-2023-25725CRITICALCVSS 9.12023-02-14
CVE-2023-25725 [CRITICAL] HAProxy before 2.7.3 may allow a bypass of access control because HTTP/1 headers are inadvertently lost in some situations aka "request smuggling." The HTTP header parsers in HAProxy may accept empty HAProxy before 2.7.3 may allow a bypass of access control because HTTP/1 headers are inadvertently lost in some situations aka "request smuggling." The HTTP header parsers in HAProxy may accept empty header field names which could be used to truncate the list of HTTP heade
msrc