Description

Improper input validation vulnerability in header parsing of Apache Traffic Server allows an attacker to smuggle requests. This issue affects Apache Traffic Server 8.0.0 to 8.1.2 and 9.0.0 to 9.0.1.

Remediation

References

CVE-2021-37148

Related Vulnerabilities

Dolibarr Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2017-7887)

e107 Other Vulnerability (CVE-2004-2040)

WordPress Plugin Backend Localization Multiple Cross-Site Scripting Vulnerabilities (1.6.1)

WordPress Plugin Redirection Cross-Site Request Forgery (3.6.2)

WordPress Plugin BeCustom Cross-Site Request Forgery (1.0.5.2)

Severity

High

Classification

CVE-2021-37148 CWE-20 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Tags

Missing Update Known Vulnerabilities