CVE-2021-39242

Several vulnerabilities were discovered in HAProxy, a fast and reliable load balancing reverse proxy, which can result in HTTP request smuggling By carefully crafting HTTP/2 requests, it is possible to smuggle another HTTP request to the backend selected by the HTTP/2 request With certain configurations, it allows an attacker to send an HTTP requ ...

A flaw was found in haproxy An input validation flaw when processing HTTP/2 requests causes haproxy to not ensure that the scheme and path portions of a URI have the expected characters This may cause specially crafted input to bypass implemented security restrictions The highest threat from this vulnerability is confidentiality (CVE-2021-3924 ...

An issue was discovered in HAProxy 22 before 2216, 23 before 2313, and 24 before 243 It can lead to a situation with an attacker-controlled HTTP Host header, because a mismatch between Host and authority is mishandled ...

An issue was discovered in HAProxy before 243 It can lead to a situation with an attacker-controlled HTTP Host header, because a mismatch between Host and authority is mishandled ...