Description (CNA)
Improper input validation vulnerability in header parsing of Apache Traffic Server allows an attacker to smuggle requests. This issue affects Apache Traffic Server 8.0.0 to 8.1.2 and 9.0.0 to 9.1.0.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Apache Software Foundation / Apache Traffic Server | affected 8.0.0 to 8.1.2 and 9.0.0 to 9.1.0 |
CWE
CWE-20, CWE-444
References
- https://lists.apache.org/thread/k01797hyncx53659wr3o72s5cvkc3164
- https://www.debian.org/security/2022/dsa-5153
ADP enrichment
No English description supplied.