Description

Improper Input Validation vulnerability in header parsing of Apache Traffic Server allows an attacker to smuggle requests. This issue affects Apache Traffic Server 8.0.0 to 8.1.2 and 9.0.0 to 9.1.0.

Remediation

References

CVE-2021-37149

Related Vulnerabilities

Jboss EAP Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') Vulnerability (CVE-2017-2666)

Apache Traffic Server Incorrect Behavior Order Vulnerability (CVE-2026-65100)

WordPress Plugin WP Statistics SQL Injection (12.0.7)

WordPress Plugin WP DS FAQ Plus Cross-Site Scripting (1.4.1)

WordPress Ultimate Member Plugin Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2022-1208)

Severity

High

Classification

CVE-2021-37149 CWE-20 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Tags

Missing Update Known Vulnerabilities