| Package | Affected versions | Patched versions |
|---|---|---|
| haproxy | ≥ 2.0.0, < 2.0.24≥ 2.2.0, < 2.2.16≥ 2.3.0, < 2.3.13≥ 2.4.0, < 2.4.3 | 2.0.242.2.162.3.132.4.3 |
An issue was discovered in HAProxy 2.0 before 2.0.24, 2.2 before 2.2.16, 2.3 before 2.3.13, and 2.4 before 2.4.3. An HTTP method name may contain a space followed by the name of a protected resource. It is possible that a server would interpret this as a request for that protected resource, such as in the "GET /admin? HTTP/1.1 /static/images HTTP/1.1" example.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free