Description

There is a vulnerability in Apache Traffic Server (ATS) 6.2.0 and prior and 7.0.0 and prior with the Host header and line folding. This can have issues when interacting with upstream proxies and the wrong host being used.

Remediation

References

CVE-2017-5660

Related Vulnerabilities

WordPress Plugin SEO by Squirrly SEO Multiple Unspecified Vulnerabilities (6.1.4)

PHP Other Vulnerability (CVE-2007-1717)

PHP Other Vulnerability (CVE-2007-1884)

Magento Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2020-3717)

WordPress Plugin WP-BlipBot Cross-Site Scripting (3.0.9)

Severity

High

Classification

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N

Tags

Missing Update Known Vulnerabilities CWE-20 CVE-2017-5660