Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-76238
HistoryAug 12, 2022 - 12:00 a.m.

Apache Traffic Server Input Validation Vulnerability (CNVD-2022-76238)

2022-08-1200:00:00
China National Vulnerability Database
www.cnvd.org.cn
10
apache traffic server
input validation
vulnerability
attack
security

0.003 Low

EPSS

Percentile

68.0%

Apache Traffic Server (ATS or TS) is a high-performance, modular HTTP proxy and caching server, similar to Nginx and Squid. Traffic Server was originally a commercial product of Inktomi, a company acquired by Yahoo in 2003, and in August 2009 Yahoo contributed the source code to the In August 2009 Yahoo contributed source code to the Apache Software Foundation (ASF) and became an ASF Top-LevelProject in April 2010. Apache TrafficServer-now an open source project developed in C. Apache Traffic Server has an input validation vulnerability that can be exploited by attackers to smuggle requests and launch targeted attacks against targets, compromising the security of the site system.