CVE-2021-37148 Request Smuggling - transfer encoding validation

2021-11-0315:20:20

CWE-20

apache

www.cve.org

7.9 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

52.2%

JSON

Improper input validation vulnerability in header parsing of Apache Traffic Server allows an attacker to smuggle requests. This issue affects Apache Traffic Server 8.0.0 to 8.1.2 and 9.0.0 to 9.0.1.

CNA Affected

[
  {
    "product": "Apache Traffic Server",
    "vendor": "Apache Software Foundation",
    "versions": [
      {
        "status": "affected",
        "version": "8.0.0 to 8.1.2 and 9.0.0 to 9.0.1"
      }
    ]
  }
]