CVE-2021-37147 Request Smuggling - LF line ending

2021-11-0315:20:19

CWE-444

CWE-20

apache

www.cve.org

7.9 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

52.7%

JSON

Improper input validation vulnerability in header parsing of Apache Traffic Server allows an attacker to smuggle requests. This issue affects Apache Traffic Server 8.0.0 to 8.1.2 and 9.0.0 to 9.1.0.

CNA Affected

[
  {
    "product": "Apache Traffic Server",
    "vendor": "Apache Software Foundation",
    "versions": [
      {
        "status": "affected",
        "version": "8.0.0 to 8.1.2 and 9.0.0 to 9.1.0"
      }
    ]
  }
]