HAProxy HTTP/3 Request Smuggling Vulnerability (JVN#88385716) and Patch Versions

From this webpage screenshot, the following key information about the vulnerability can be obtained: 1. Vulnerability ID: JVN#88385716 2. Vulnerability Name: HAProxy vulnerable to HTTP request/response smuggling 3. Affected Products: - HAProxy 2.6 versions 2.6.18 and earlier - HAProxy 2.8 versions 2.8.10 and earlier - HAProxy 2.9 versions 2.9.9 and earlier - HAProxy 3.0 versions 3.0.2 and earlier 4. Description: - The HAProxy HTTP/3 implementation contains an issue in accepting malformed HTTP headers. - When a request containing malformed HTTP headers is forwarded to an HTTP/1.1 non-compliant back-end server, it can be exploited to conduct an HTTP request/response smuggling attack (CWE-444). 5. Impact: - A remote attacker may access a path that is restricted by an ACL (Access Control List) configured on the product. - As a result, the attacker may obtain sensitive information. 6. Solution: - Update the software to the latest version as specified by the developer. - The vulnerability was addressed in the following versions: - HAProxy version 2.6.19 - HAProxy version 2.8.11 - HAProxy version 2.9.10 - HAProxy version 3.0.3 7. Reference Links: - HAProxy - The Reliable, High Perf. TCP/HTTP Load Balancer - Repositories - haproxy-2.6.git/commit - Repositories - haproxy-2.8.git/commit - Repositories - haproxy-2.9.git/commit - Repositories - haproxy-3.0.git/commit 8. CVSS Score: - CVSS v3: 3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N - Base Score: 5.3 This information helps users understand the vulnerability details, affected product versions, remediation steps, and relevant reference links.

Goal Reached Thanks to every supporter — we hit 100%!

HAProxy HTTP/3 Request Smuggling Vulnerability (JVN#88385716) and Patch Versions