Description

Invalid Accept-Encoding header can cause Apache Traffic Server to fail cache lookup and force forwarding requests. This issue affects Apache Traffic Server: from 8.0.0 through 8.1.10, from 9.0.0 through 9.2.4. Users are recommended to upgrade to version 8.1.11 or 9.2.5, which fixes the issue.

Remediation

References

CVE-2024-35296

Related Vulnerabilities

MediaWiki Incorrect Authorization Vulnerability (CVE-2021-41801)

PrestaShop Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-21398)

WordPress Plugin Auctions 'upload.php' Arbitrary File Upload (2.0.1.3)

MediaWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-35474)

MySQL CVE-2022-21339 Vulnerability (CVE-2022-21339)

Severity

High

Classification

CVE-2024-35296 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L

Tags

Missing Update Known Vulnerabilities