CVE-2023-25950 | BDVDB-2026-199779 Detail
HAProxy TechnologiesHAProxy
Description#
HTTP request/response smuggling vulnerability in HAProxy version 2.7.0, and 2.6.1 to 2.6.7 allows a remote attacker to alter a legitimate user's request. As a result, the attacker may obtain sensitive information or cause a denial-of-service (DoS) condition.
Impact#
Per CVSS v3.1: confidentiality impact low, integrity impact low, availability impact low. Attack vector: network.
Weaknesses#
- CWE-444 Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')
References#
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.