CVE-2022-31779 Improper HTTP/2 scheme and method validation

2022-08-1005:50:40

CWE-20

apache

www.cve.org

0.003 Low

EPSS

Percentile

68.0%

JSON

Improper Input Validation vulnerability in HTTP/2 header parsing of Apache Traffic Server allows an attacker to smuggle requests. This issue affects Apache Traffic Server 8.0.0 to 9.1.2.

CNA Affected

[
  {
    "product": "Apache Traffic Server",
    "vendor": "Apache Software Foundation",
    "versions": [
      {
        "status": "affected",
        "version": "8.0.0 to 9.1.2"
      }
    ]
  }
]