Lucene search

K
osvGoogleOSV:USN-5869-1
HistoryFeb 14, 2023 - 5:09 p.m.

haproxy vulnerability

2023-02-1417:09:35
Google
osv.dev
4

7.6 High

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

68.0%

Bahruz Jabiyev, Anthony Gavazzi, Engin Kirda, Kaan Onarlioglu, Adi Peleg,
and Harvey Tuch discovered that HAProxy incorrectly handled empty header
names. A remote attacker could possibly use this issue to manipulate
headers and bypass certain authentication checks and restrictions.