Description

Incorrect handling of url fragment vulnerability of Apache Traffic Server allows an attacker to poison the cache. This issue affects Apache Traffic Server 7.0.0 to 7.1.12, 8.0.0 to 8.1.1, 9.0.0 to 9.0.1.

Remediation

References

CVE-2021-27577

Related Vulnerabilities

WordPress Plugin Event Single Page Templates Addon For The Events Calendar Security Bypass (1.5)

Drupal Permissions, Privileges, and Access Controls Vulnerability (CVE-2014-5020)

WordPress Plugin ComicPress Manager 'lang' Parameter Cross-Site Scripting (1.4.9.9)

WordPress Plugin Stream Video Player Cross-Site Request Forgery (1.4.0)

MySQL Improper Access Control Vulnerability (CVE-2016-0611)

Severity

High

Classification

CVE-2021-27577 CWE-444 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Tags

Missing Update Known Vulnerabilities