CVE-2023-45539
CVSS 3.1 Score 8.2 of 10 (high)
Details
Summary
CVE-2023-45539 is a vulnerability found in HAProxy versions before 2.8.2. It allows remote attackers to obtain sensitive information or have unspecified impact by including "#" as part of the URI component. This can result in misinterpretation of a path_end rule, potentially routing requests to unintended destinations, such as serving index.html#.png from a static server. The vulnerability affects multiple products and to remediate it, organizations should update their HAProxy installations to version 2.8.2 or later. This vulnerability has a high severity rating and can pose a danger to organizations by exposing sensitive information and potentially disrupting normal operations.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Advisories, Assessments, and Mitigations
Prioritize, Pinpoint, and Act to Prevent Vulnerability Exploits with Recorded Future
- Gain complete coverage of your cyber, third party, and physical attack surface
- Proactively mitigate threats before they turn into costly attacks
- Make fast, effective, data-driven decisions