CVE-2021-27577 Incorrect handling of url fragment leads to cache poisoning

2021-06-2911:45:19

CWE-444

apache

www.cve.org

8.8 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

65.8%

JSON

Incorrect handling of url fragment vulnerability of Apache Traffic Server allows an attacker to poison the cache. This issue affects Apache Traffic Server 7.0.0 to 7.1.12, 8.0.0 to 8.1.1, 9.0.0 to 9.0.1.

CNA Affected

[
  {
    "product": "Apache Traffic Server",
    "vendor": "Apache Software Foundation",
    "versions": [
      {
        "status": "affected",
        "version": "Apache Traffic Server 7.0.0 to 7.1.12, 8.0.0 to 8.1.1, 9.0.0 to 9.0.1"
      }
    ]
  }
]