BIT-haproxy-2023-45539: High severity HAProxy HAProxy vulnerability

Q: Which deployments are most likely to be exposed?

Deployments using HAProxy before 2.8.2 with path_end rules that can be misinterpreted when a URI contains a # character are affected. One cited example is routing index.html#.png to a static server.

Q: What does an attacker need to exploit this issue?

The issue is remotely exploitable with no privileges or user interaction required. An attacker needs to send a crafted request URI containing # that triggers incorrect interpretation of a path_end rule.

Q: What should be done if an affected version is in use?

Upgrade HAProxy to 2.8.2 or later. The provided information does not specify a workaround or temporary configuration mitigation.

Published Nov 28, 2023

Updated

HAProxy before 2.8.2 accepts # as part of the URI component, which might allow remote attackers to obtain sensitive information or have unspecified other impact upon misinterpretation of a pathend rule, such as routing index.html#.png to a static server.

Affected Software

1 affected component

HAProxy HAProxy<2.8.2

Event History

Nov 28, 2023

CVE Published

via OSV·12:00 AM

Data Sourced

via OSV·12:00 AM

DescriptionSeverity

Frequently Asked Questions

Which deployments are most likely to be exposed?

Deployments using HAProxy before 2.8.2 with path_end rules that can be misinterpreted when a URI contains a # character are affected. One cited example is routing index.html#.png to a static server.

What does an attacker need to exploit this issue?

The issue is remotely exploitable with no privileges or user interaction required. An attacker needs to send a crafted request URI containing # that triggers incorrect interpretation of a path_end rule.

What should be done if an affected version is in use?

Upgrade HAProxy to 2.8.2 or later. The provided information does not specify a workaround or temporary configuration mitigation.

BIT-haproxy-2023-45539: High severity HAProxy HAProxy vulnerability

Affected Software

Event History

Frequently Asked Questions

Which deployments are most likely to be exposed?

What does an attacker need to exploit this issue?

What should be done if an affected version is in use?

Company

Resources

Contact

Frequently Asked Questions

Which deployments are most likely to be exposed?

What does an attacker need to exploit this issue?

What should be done if an affected version is in use?