Description
Apache Traffic Server is vulnerable to HTTP/2 setting flood attacks. Earlier versions of Apache Traffic Server didn't limit the number of setting frames sent from the client using the HTTP/2 protocol. Users should upgrade to Apache Traffic Server 7.1.7, 8.0.4, or later versions.
Remediation
References
Related Vulnerabilities
WordPress Plugin Asgaros Forum Multiple Vulnerabilities (1.15.14)
phpMyAdmin Permissions, Privileges, and Access Controls Vulnerability (CVE-2008-7251)
WordPress Plugin Computer Repair Shop Cross-Site Scripting (1.0)
TYPO3 Generation of Error Message Containing Sensitive Information Vulnerability (CVE-2025-59016)
WordPress Plugin Genesis Columns Advanced Cross-Site Scripting (2.0.3)