CVE-2024-53008:
Medium (5.3)
Description
Inconsistent interpretation of HTTP requests ('HTTP Request/Response Smuggling') issue exists in HAProxy. If this vulnerability is exploited, a remote attacker may access a path that is restricted by ACL (Access Control List) set on the product. As a result, the attacker may obtain sensitive information.
Classification
CVE ID: CVE-2024-53008
CVSS Base Severity: MEDIUM
CVSS Base Score: 5.3
Affected Products
Vendor: HAProxy Project
Product: HAProxy 2.6
Exploit Prediction Scoring System (EPSS)
EPSS Score: 0.04% (probability of being exploited)
EPSS Percentile: 12.38% (scored less or equal to compared to others)
EPSS Date: 2025-02-03 (when was this score calculated)