Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2023-55453
HistoryJun 16, 2023 - 12:00 a.m.

Apache Traffic Server Denial of Service Vulnerability (CNVD-2023-55453)

2023-06-1600:00:00
China National Vulnerability Database
www.cnvd.org.cn
4
apache traffic server
denial of service
vulnerability
input validation
push method
configuration option

0.003 Low

EPSS

Percentile

68.2%

Apache Traffic Server (ATS) is the United States Apache (Apache) Foundation’s set of scalable HTTP proxy and caching server. A denial of service vulnerability exists in Apache Traffic Server due to improper input validation related to the configuration option proxy.config.http.push_method_enabled failing to block the push method. An attacker could exploit this vulnerability to cause a denial of service.