CVE-2022-25763 Improper input validation on HTTP/2 headers

2022-08-1005:50:21

CWE-444

apache

www.cve.org

0.006 Low

EPSS

Percentile

78.6%

JSON

Improper Input Validation vulnerability in HTTP/2 request validation of Apache Traffic Server allows an attacker to create smuggle or cache poison attacks. This issue affects Apache Traffic Server 8.0.0 to 9.1.2.

CNA Affected

[
  {
    "product": "Apache Traffic Server",
    "vendor": "Apache Software Foundation",
    "versions": [
      {
        "status": "affected",
        "version": "8.0.0 to 9.1.2"
      }
    ]
  }
]