CVE-2021-39242

An issue was discovered in HAProxy 2.2 before 2.2.16, 2.3 before 2.3.13, and 2.4 before 2.4.3

published August 17, 2021

CVSS
—
EPSS
2%
Percentile
82.7
In the wild
Unconfirmed
What it is

An issue was discovered in HAProxy 2.2 before 2.2.16, 2.3 before 2.3.13, and 2.4 before 2.4.3. It can lead to a situation with an attacker-controlled HTTP Host header, because a mismatch between Host and authority is mishandled.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02231 · 82.7th percentile
Published
2021-08-17T18:33Z
EPSS history
Timeline
  • 17 AUG 18:33Z
    An issue was discovered in HAProxy 2.2 before 2.2.16, 2.3 before 2.3.13, and 2.4 before 2.4.3
    cvelistv5