Description
Apache Traffic Server allows request smuggling if chunked messages are malformed. This issue affects Apache Traffic Server: from 9.0.0 through 9.2.12, from 10.0.0 through 10.1.1. Users are recommended to upgrade to version 9.2.13 or 10.1.2, which fix the issue.
Remediation
References
Related Vulnerabilities
WordPress Plugin WP Email Template PHP Object Injection (2.4.0)
WordPress Permissions, Privileges, and Access Controls Vulnerability (CVE-2012-3383)
Jenkins Permissions, Privileges, and Access Controls Vulnerability (CVE-2015-1806)
WordPress Plugin MStore API-Create Native Android & iOS Apps On The Cloud SQL Injection (4.10.8)
WordPress Plugin Podlove Podcast Publisher Cross-Site Scripting (3.8.2)