Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2023-03926
HistoryAug 15, 2022 - 12:00 a.m.

Apache Traffic Server Input Validation Error Vulnerability (CNVD-2023-03926)

2022-08-1500:00:00
China National Vulnerability Database
www.cnvd.org.cn
8
apache traffic server
input validation error
vulnerability
cnvd-2023-03926
http proxy
caching servers
apache foundation
versions 8.0.0
9.1.2
attacker
invalid headers

0.003 Low

EPSS

Percentile

68.0%

Apache Traffic Server (ATS) is a set of scalable HTTP proxy and caching servers from the Apache Foundation. Apache Traffic Server versions 8.0.0 through 9.1.2 are vulnerable to an input validation error, which could be exploited by an attacker to send invalid headers.