AZL-32061
See a problem?- Import Source
- https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-32061.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/AZL-32061
- Upstream
- Published
- 2023-11-28T20:15:07Z
- Modified
- 2026-04-01T05:10:34.288748Z
- Severity
-
- 8.2 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N CVSS Calculator
- Summary
- CVE-2023-45539 affecting package haproxy for versions less than 2.4.24-1
- Details
-
HAProxy before 2.8.2 accepts # as part of the URI component, which might allow remote attackers to obtain sensitive information or have unspecified other impact upon misinterpretation of a path_end rule, such as routing index.html#.png to a static server.
- References