Description

Improper Input Validation vulnerability in HTTP/2 request validation of Apache Traffic Server allows an attacker to create smuggle or cache poison attacks. This issue affects Apache Traffic Server 8.0.0 to 9.1.2.

Remediation

References

CVE-2022-25763

Related Vulnerabilities

Apache HTTP Server Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2007-6421)

WordPress Plugin Mobile Booster Security Bypass (1.0)

WordPress Plugin Woocommerce-Recent Purchases Local File Inclusion (1.0.1)

TYPO3 URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2010-3661)

WordPress Plugin Royal Gallery Cross-Site Scripting (2.0)

Severity

High

Classification

CVE-2022-25763 CWE-20 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Tags

Missing Update Known Vulnerabilities