CVE-2023-25950: High severity aprox aproxengine vulnerability
HTTP request/response smuggling vulnerability in HAProxy version 2.7.0, and 2.6.1 to 2.6.7 allows a remote attacker to alter a legitimate user's request. As a result, the attacker may obtain sensitive information or cause a denial-of-service (DoS) condition.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is CVE-2023-25950?
CVE-2023-25950 is a HTTP request/response smuggling vulnerability in HAProxy versions 2.7.0 and 2.6.1 to 2.6.7.
How does CVE-2023-25950 affect HAProxy?
CVE-2023-25950 allows a remote attacker to alter a legitimate user's request, potentially obtaining sensitive information or causing a denial-of-service (DoS) condition.
What is the severity of CVE-2023-25950?
The severity of CVE-2023-25950 is high with a CVSS score of 7.3.
Which versions of HAProxy are affected by CVE-2023-25950?
HAProxy versions 2.7.0 and 2.6.1 to 2.6.7 are affected by CVE-2023-25950.
How can I mitigate the vulnerability CVE-2023-25950?
To mitigate the vulnerability, it is recommended to update to a version of HAProxy that includes the fix provided by the vendor.