CVE Database
/

CVE-2023-25950

Back to search

CVE-2023-25950

Published: Apr 11, 2023

Modified: Feb 11, 2025

PUBLISHED

Description

HTTP request/response smuggling vulnerability in HAProxy version 2.7.0, and 2.6.1 to 2.6.7 allows a remote attacker to alter a legitimate user's request. As a result, the attacker may obtain sensitive information or cause a denial-of-service (DoS) condition.

VendorProductVersions

HAProxy Technologies

HAProxy

affected
version 2.7.0, and version 2.6.1 to 2.6.7

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now