Description

ATS negative cache option is vulnerable to a cache poisoning attack. If you have this option enabled, please upgrade or disable this feature. Apache Traffic Server versions 7.0.0 to 7.1.11 and 8.0.0 to 8.1.0 are affected.

Remediation

References

CVE-2020-17509

Related Vulnerabilities

Magento Improper Input Validation Vulnerability (CVE-2021-28585)

WordPress Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-3414)

Undertow Insertion of Sensitive Information into Log File Vulnerability (CVE-2019-3888)

Moodle Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2012-6103)

WordPress Plugin All in One SEO-Best WordPress SEO-Easily Improve SEO Rankings & Increase Traffic Cross-Site Scripting (2.9.1.1)

Severity

High

Classification

CVE-2020-17509 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Tags

Missing Update Known Vulnerabilities