Hello everyone, Looking at HAProxys 3.4.7 source code a security vulnerability with CVSS score 7.4 was found: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N = 7.4 (High)
Rationale: - AV:Network — exploitable over HTTP - AC:High — attacker must know/guess the pubkey file path (not directly observable, but often predictable) - PR:None — no authentication needed to send the forged token - UI:None — no user interaction required - S:Unchanged — stays within HAProxy's authorization scope - C:High / I:High — full authentication bypass, arbitrary claim forgery - A:None — no availability impact Do I open an Issue on github or do I send the PoC with findings to someone directly? Kind regards
