CVE-2023-45539 (published 2023-11-28T00:00:00)
HAProxy before 2.8.2 accepts # as part of the URI component, which might allow remote attackers to obtain sensitive information or have unspecified other impact upon misinterpretation of a path_end rule, such as routing index.html#.png to a static server.
Affected products: Vendor: n/a
Product: n/a
Versions: n/a