Description

Incorrect handling of url fragment vulnerability of Apache Traffic Server allows an attacker to poison the cache. This issue affects Apache Traffic Server 7.0.0 to 7.1.12, 8.0.0 to 8.1.1, 9.0.0 to 9.0.1.

Remediation

References

CVE-2021-27577

Related Vulnerabilities

WordPress Plugin Startklar Elementor Addons Arbitrary File Deletion (1.7.13)

WordPress Plugin YOP Poll Cross-Site Scripting (6.0.2)

PHP Other Vulnerability (CVE-2005-3392)

Drupal Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2012-5652)

MySQL CVE-2019-2780 Vulnerability (CVE-2019-2780)

Severity

High

Classification

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Tags

Missing Update Known Vulnerabilities CWE-444 CVE-2021-27577