CVE-2021-39242

Name of the Vulnerable Software and Affected Versions HAProxy versions 2.2 before 2.2.16 HAProxy versions 2.3 before 2.3.13 HAProxy versions 2.4 before 2.4.3

Description The issue is related to a mismatch between Host and authority being mishandled, which can lead to an attacker-controlled HTTP Host header. This can allow a remote attacker to impact data integrity.

Recommendations For HAProxy versions 2.2 before 2.2.16, update to version 2.2.16 or later. For HAProxy versions 2.3 before 2.3.13, update to version 2.3.13 or later. For HAProxy versions 2.4 before 2.4.3, update to version 2.4.3 or later.