Lucene search
GoogleOSV:USN-6530-2HistoryJul 23, 2024 - 4:55 p.m.
haproxy vulnerability
2024-07-2316:55:58
Google
osv.dev
6
haproxy
uri components
sensitive information
path_end rules
CVSS3
8.2
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N
AI Score
6.7
Confidence
Low
EPSS
0.001
Percentile
46.4%
Seth Manesse and Paul Plasil discovered that HAProxy incorrectly handled
URI components containing the hash character (#). A remote attacker could
possibly use this issue to obtain sensitive information, or to bypass
certain path_end rules.
Related
nessus
nessus
SUSE SLES15 Security Update : haproxy (SUSE-SU-2023:4645-1)
2023-12-07 00:00:00
EulerOS 2.0 SP8 : haproxy (EulerOS-SA-2024-2034)
2024-07-22 00:00:00
EulerOS 2.0 SP10 : haproxy (EulerOS-SA-2024-1336)
2024-03-12 00:00:00
openvas
openvas
Huawei EulerOS: Security Advisory for haproxy (EulerOS-SA-2024-1314)
2024-03-13 00:00:00
Ubuntu: Security Advisory (USN-6530-2)
2024-07-24 00:00:00
Huawei EulerOS: Security Advisory for haproxy (EulerOS-SA-2024-1336)
2024-03-13 00:00:00
alpinelinux
alpinelinux
CVE-2023-45539
2023-11-28 20:15:07
osv
osv
haproxy - security update
2023-12-14 00:00:00
CVE-2023-45539
2023-11-28 20:15:07
Security update for haproxy
2024-07-09 17:20:53
cloudlinux
cloudlinux
haproxy: Fix of CVE-2023-45539
2023-12-21 18:24:56
nvd
nvd
CVE-2023-45539
2023-11-28 20:15:07
debian
debian
[SECURITY] [DLA 3688-1] haproxy security update
2023-12-14 15:55:00
[SECURITY] [DSA 5590-1] haproxy security update
2023-12-28 12:46:56
cvelist
cvelist
CVE-2023-45539
2023-11-28 00:00:00
ubuntu
ubuntu
HAProxy vulnerability
2023-12-05 00:00:00
HAProxy vulnerability
2024-07-23 00:00:00
veracode
veracode
Information Disclosure
2023-11-29 18:31:33
redhatcve
redhatcve
CVE-2023-45539
2023-12-05 18:57:01
prion
prion
Code injection
2023-11-28 20:15:00
cbl_mariner
cbl_mariner
CVE-2023-45539 affecting package haproxy for versions less than 2.4.24-1
2024-09-19 09:11:58
cve
cve
CVE-2023-45539
2023-11-28 20:15:07
ubuntucve
ubuntucve
CVE-2023-45539
2023-12-04 00:00:00
debiancve
debiancve
CVE-2023-45539
2023-11-28 20:15:07
redos
redos
ROS-20240328-10
2024-03-28 00:00:00
oraclelinux
oraclelinux
haproxy security update
2024-03-06 00:00:00
redhat
redhat
(RHSA-2024:4853) Moderate: OpenShift Container Platform 4.15.24 packages and security update
2024-07-31 00:36:20
(RHSA-2024:1142) Moderate: haproxy security update
2024-03-05 15:32:23
(RHSA-2024:1089) Moderate: haproxy security update
2024-03-05 06:13:18
almalinux
almalinux
Moderate: haproxy security update
2024-03-05 00:00:00
photon
photon
Important Photon OS Security Update - PHSA-2023-5.0-0167
2023-12-12 00:00:00
CVSS3
8.2
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N
AI Score
6.7
Confidence
Low
EPSS
0.001
Percentile
46.4%
Related for OSV:USN-6530-2