Description
Apache Traffic Server allows request smuggling if chunked messages are malformed. This issue affects Apache Traffic Server: from 9.0.0 through 9.2.12, from 10.0.0 through 10.1.1. Users are recommended to upgrade to version 9.2.13 or 10.1.2, which fix the issue.
Remediation
References
Related Vulnerabilities
Oracle JRE CVE-2012-1682 Vulnerability (CVE-2012-1682)
Moodle Resource Management Errors Vulnerability (CVE-2014-7847)
Jetty Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2026-10051)
WordPress Plugin Ghost Arbitrary File Download (0.5.5)
Django Improper Neutralization of Script in Attributes in a Web Page Vulnerability (CVE-2026-15920)