Description
Apache Traffic Server forwards HTTP/2 origin trailers to HTTP/1 clients without proper chunked framing when converting HTTP/2 to HTTP/1. This issue affects Apache Traffic Server: from 10.0.0 through 10.1.3. Users are recommended to upgrade to version 9.2.15 or 10.1.4, which fix the issue.
Remediation
References
Related Vulnerabilities
Plone CMS Permissions, Privileges, and Access Controls Vulnerability (CVE-2013-4191)
Oracle Application Server CVE-2002-1637 Vulnerability (CVE-2002-1637)
MySQL CVE-2017-3309 Vulnerability (CVE-2017-3309)
Apache Tomcat Permissions, Privileges, and Access Controls Vulnerability (CVE-2016-0763)
WordPress Plugin WP Shieldon-WordPress Firewall Cross-Site Scripting (1.6.3)