Description

Improper input validation vulnerability in header parsing of Apache Traffic Server allows an attacker to smuggle requests. This issue affects Apache Traffic Server 8.0.0 to 8.1.2 and 9.0.0 to 9.0.1.

Remediation

References

CVE-2021-37148

Related Vulnerabilities

XWiki Incorrect Use of Privileged APIs Vulnerability (CVE-2022-24821)

WordPress Plugin WordPress Simple Shop Cross-Site Scripting (1.2)

Squid Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2016-4053)

MySQL CVE-2015-0423 Vulnerability (CVE-2015-0423)

Moodle Permissions, Privileges, and Access Controls Vulnerability (CVE-2014-0216)

Severity

High

Classification

CVE-2021-37148 CWE-20 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Tags

Missing Update Known Vulnerabilities