CVE-2022-37392 Apache Traffic Server: Improperly reading the client requests

2022-12-1910:59:05

CWE-754

apache

www.cve.org

apache traffic server

vulnerability

request handling

6.4 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

48.9%

JSON

Improper Check for Unusual or Exceptional Conditions vulnerability in handling the requests to Apache Traffic Server. This issue affects Apache Traffic Server 8.0.0 to 9.1.2.

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "Apache Traffic Server",
    "vendor": "Apache Software Foundation",
    "versions": [
      {
        "lessThanOrEqual": "9.1.3",
        "status": "affected",
        "version": "8.0.0",
        "versionType": "custom"
      }
    ]
  }
]