CVE-2021-44040 HTTP request line fuzzing attacks

2022-03-2314:05:15

CWE-20

apache

www.cve.org

7.9 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

52.0%

JSON

Improper Input Validation vulnerability in request line parsing of Apache Traffic Server allows an attacker to send invalid requests. This issue affects Apache Traffic Server 8.0.0 to 8.1.3 and 9.0.0 to 9.1.1.

CNA Affected

[
  {
    "product": "Apache Traffic Server",
    "vendor": "Apache Software Foundation",
    "versions": [
      {
        "status": "affected",
        "version": "8.0.0 to 8.1.3 and 9.0.0 to 9.1.1"
      }
    ]
  }
]