Beveiligingsadvies

CVE-2021-40346

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2021-09-08 16:40:38
Laatst bijgewerkt 2024-08-04 02:27:31
Toegewezen door mitre
CVSS-score geen score
Status PUBLISHED

Beschrijving

An integer overflow exists in HAProxy 2.0 through 2.5 in htx_add_header that can be exploited to perform an HTTP request smuggling attack, allowing an attacker to bypass all configured http-request HAProxy ACLs and possibly other ACLs.