Description

Improper input validation vulnerability in header parsing of Apache Traffic Server allows an attacker to smuggle requests. This issue affects Apache Traffic Server 8.0.0 to 8.1.2 and 9.0.0 to 9.0.1.

Remediation

References

CVE-2021-37148

Related Vulnerabilities

WordPress Plugin U Extended Comment 'fileurl' Parameter Arbitrary File Download (1.0.1)

Perl Out-of-bounds Write Vulnerability (CVE-2018-18311)

WordPress Plugin Product Addons & Fields for WooCommerce Cross-Site Scripting (32.0.5)

Magento Authorization Bypass Through User-Controlled Key Vulnerability (CVE-2019-7872)

phpMyAdmin Other Vulnerability (CVE-2006-1804)

Severity

High

Classification

CVE-2021-37148 CWE-20 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Tags

Missing Update Known Vulnerabilities