Описание
HAProxy before 2.8.2 accepts # as part of the URI component, which might allow remote attackers to obtain sensitive information or have unspecified other impact upon misinterpretation of a path_end rule, such as routing index.html#.png to a static server.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Ceph Storage 5 | haproxy | Affected | ||
| Red Hat Enterprise Linux 8 | haproxy | Fixed | RHSA-2024:8849 | 05.11.2024 |
| Red Hat Enterprise Linux 8.2 Advanced Update Support | haproxy | Fixed | RHSA-2024:9945 | 19.11.2024 |
| Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support | haproxy | Fixed | RHSA-2024:10271 | 26.11.2024 |
| Red Hat Enterprise Linux 8.4 Telecommunications Update Service | haproxy | Fixed | RHSA-2024:10271 | 26.11.2024 |
| Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions | haproxy | Fixed | RHSA-2024:10271 | 26.11.2024 |
| Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support | haproxy | Fixed | RHSA-2024:8874 | 05.11.2024 |
| Red Hat Enterprise Linux 8.6 Telecommunications Update Service | haproxy | Fixed | RHSA-2024:8874 | 05.11.2024 |
| Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions | haproxy | Fixed | RHSA-2024:8874 | 05.11.2024 |
| Red Hat Enterprise Linux 8.8 Extended Update Support | haproxy | Fixed | RHSA-2024:10267 | 26.11.2024 |
Показывать по
Дополнительная информация
Статус:
5.3 Medium
CVSS3
Связанные уязвимости
HAProxy before 2.8.2 accepts # as part of the URI component, which might allow remote attackers to obtain sensitive information or have unspecified other impact upon misinterpretation of a path_end rule, such as routing index.html#.png to a static server.
HAProxy before 2.8.2 accepts # as part of the URI component, which might allow remote attackers to obtain sensitive information or have unspecified other impact upon misinterpretation of a path_end rule, such as routing index.html#.png to a static server.
HAProxy before 2.8.2 accepts # as part of the URI component, which mig ...
5.3 Medium
CVSS3