HTTP request/response smuggling vulnerability in HAProxy version 2.7.0, and 2.6.1 to 2.6.7 allows a remote attacker to alter a legitimate user's request. As a result, the attacker may obtain sensitive information or cause a denial-of-service (DoS) condition.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: jpcert

Published: 2023-04-11T00:00:00

Updated: 2024-08-02T11:39:06.556Z

Reserved: 2023-03-15T00:00:00

Link: CVE-2023-25950

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2023-04-11T09:15:07.937

Modified: 2023-11-07T04:09:15.983

Link: CVE-2023-25950

cve-icon Redhat

Severity : Moderate

Publid Date: 2023-04-11T00:00:00Z

Links: CVE-2023-25950 - Bugzilla