CVE-2023-25725
haproxy: request smuggling attack in HTTP/1 header parsing
Severity
ImportantRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · February 15, 2023
Updated · November 21, 2025
Description
A flaw was found in HAProxy's headers processing that causes HAProxy to drop important headers fields such as Connection, Content-length, Transfer-Encoding, and Host after having partially processed them. A maliciously crafted HTTP request could be used in an HTTP request smuggling attack to bypass filtering and detection by HAProxy.
Statement
Red Hat OpenStack Platform doesn't ship any haproxy code of its own and instead the openstack-haproxy-container consumes the haproxy RPM provided by RHEL.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 8.2CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L
CWE-444 · Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')