Description (CNA)
HAProxy Community Edition 3.0 through 3.3 before 3.3.3 lacks a length check for the NEW_TOKEN format. HAProxy Enterprise and ALOHA are also affected.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| HAProxy / HAProxy | affected 3.0 before 3.0.12; affected 3.1 before 3.1.14; affected 3.2 before 3.2.12; affected 3.3 before 3.3.3 |
CWE
CWE-130
References
- https://www.haproxy.org
- https://git.haproxy.org/?p=haproxy-3.2.git;a=commit;h=4765277f4f915baac2d57db63538ff0a59966deb
ADP enrichment
No English description supplied.
No references supplied.