Description

Improper input validation vulnerability in header parsing of Apache Traffic Server allows an attacker to smuggle requests. This issue affects Apache Traffic Server 8.0.0 to 8.1.2 and 9.0.0 to 9.1.0.

Remediation

References

CVE-2021-37147

Related Vulnerabilities

WordPress Plugin Advanced Permalinks Cross-Site Scripting (0.1.19)

WordPress Plugin Klarna Checkout for WooCommerce Security Bypass (2.0.9)

MySQL CVE-2018-3060 Vulnerability (CVE-2018-3060)

Jenkins Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-0325)

Drupal Core 6.x Multiple Vulnerabilities (6.0 - 6.26)

Severity

High

Classification

CVE-2021-37147 CWE-20 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Tags

Missing Update Known Vulnerabilities