Lucene search
China National Vulnerability DatabaseCNVD-2023-03925HistoryAug 15, 2022 - 12:00 a.m.
Apache Traffic Server Input Validation Error Vulnerability (CNVD-2023-03925)
2022-08-1500:00:00
China National Vulnerability Database
www.cnvd.org.cn
4
0.002 Low
EPSS
Percentile
60.0%
Apache Traffic Server (ATS) is a set of scalable HTTP proxy and caching servers from the Apache Foundation. Apache Traffic Server is vulnerable to an input validation error, which can be exploited by attackers to poison the cache.
| CPE | Name | Operator | Version |
|---|---|---|---|
| apache apache traffic server >=8.0.0， | le | 8.1.4 | |
| apache apache traffic server >=9.0.0， | le | 9.12 |
Related
ubuntucve
ubuntucve
CVE-2022-31778
2022-08-10 00:00:00
veracode
veracode
Cross-site Scripting (XSS)
2022-08-21 02:46:35
openvas
openvas
Apache Traffic Server (ATS) 8.0.0 <= 8.1.4 Improper Input Validation Vulnerability
2022-08-11 00:00:00
Debian: Security Advisory (DLA-3385-1)
2023-04-11 00:00:00
Debian: Security Advisory (DSA-5206-1)
2022-08-14 00:00:00
cvelist
cvelist
CVE-2022-31778 Transfer-Encoding not treated as hop-by-hop
2022-08-10 00:00:00
debiancve
debiancve
CVE-2022-31778
2022-08-10 06:15:08
prion
prion
Input validation
2022-08-10 06:15:00
cve
cve
CVE-2022-31778
2022-08-10 06:15:08
osv
osv
CVE-2022-31778
2022-08-10 06:15:08
trafficserver - security update
2023-04-05 00:00:00
trafficserver - security update
2022-08-12 00:00:00
nvd
nvd
CVE-2022-31778
2022-08-10 06:15:08
nessus
nessus
Debian DLA-3385-1 : trafficserver - LTS security update
2023-04-10 00:00:00
Debian DSA-5206-1 : trafficserver - security update
2022-08-13 00:00:00
debian
debian
[SECURITY] [DLA 3385-1] trafficserver security update
2023-04-05 22:00:47
[SECURITY] [DSA 5206-1] trafficserver security update
2022-08-12 15:05:18