ats-esi-unix-recvport

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · ats-esi-unix-recvport Write-up: https://abraxaslabs.tech/research/ats-esi-unix-recvport ats-esi-unix-recvport Class: SSRF Reach: Remote Apache Traffic Server 10.2.0 b1df7334 - Apache Software Foundation ESI FetchSM...

CVE-2026-33267-PoC

CVE-2026-33267 — Apache Traffic Server untrusted @ header → internal metadata spoof CVSS 10.0 Critical · CWE-20 · GHSA-jrh6-9hgv-mqm7 Summary Apache Traffic Server reserves @-prefixed headers @Ats-Internal, @ICAP-Status, @TCPInfo, ... for internal metadata : they live in the in-memory header...

ats-magick-unsigned

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · ats-magick-unsigned Write-up: https://abraxaslabs.tech/research/ats-magick-unsigned ats-magick-unsigned Class: File write Reach: Remote Apache Traffic Server 10.2.0 b1df7334 - Apache Software Foundation experimental...

ats-jsonrpc-unrestricted

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · ats-jsonrpc-unrestricted Write-up: https://abraxaslabs.tech/research/ats-jsonrpc-unrestricted ats-jsonrpc-unrestricted Class: Privilege leftover recon Reach: Local Apache Traffic Server 10.2.0 b1df7334 - Apache Softwa...

ats-realip-plugin-acl

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · ats-realip-plugin-acl ats-realip-plugin-acl Class: Privilege leftover Reach: Remote Apache Traffic Server 10.2.0 b1df7334 - Apache Software Foundation experimental realip plus the documented acl.subjects: PLUGIN...

ats-regex-remap-userinfo

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · ats-regex-remap-userinfo ats-regex-remap-userinfo Class: SSRF Reach: Remote Apache Traffic Server 10.2.0 b1df7334 - Apache Software Foundation regexremap $n substitution is concatenated into a string and fed to...

ats-authproxy-prefix

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · ats-authproxy-prefix ats-authproxy-prefix Class: Privilege leftover Reach: Remote Apache Traffic Server 10.2.0 b1df7334 - Apache Software Foundation authproxy --forward-header-prefix copies identity fields from a 2xx...

ats-ipallow-method-case

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · ats-ipallow-method-case ats-ipallow-method-case Class: Privilege leftover Reach: Remote Apache Traffic Server 10.2.0 b1df7334 - Apache Software Foundation HTTP/1 mixed-case methods skip the default ipallow.yaml deny o...

ats-redirect-zero-net

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · ats-redirect-zero-net Write-up: https://abraxaslabs.tech/research/ats-redirect-zero-net ats-redirect-zero-net Class: SSRF Reach: Remote Apache Traffic Server 10.2.0 b1df7334 - Apache Software Foundation redirect.actio...

ats-cripts-rri-uaf

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · ats-cripts-rri-uaf Write-up: https://abraxaslabs.tech/research/ats-cripts-rri-uaf ats-cripts-rri-uaf Class: Crash Reach: Remote Apache Traffic Server 10.2.0 b1df7334 - Apache Software Foundation Cripts Remap::From / T...

CVE-2026-111816

A flaw was found in Apache Traffic Server. Malformed HTTP 302 redirect responses containing chunked transfer encoding are improperly forwarded instead of being rejected as parse errors. A remote attacker can exploit this condition to cause HTTP response desynchronization and cache poisoning,...

CVE-2026-111814

A flaw was found in Apache Traffic Server. Its default outbound session-sharing policy can reuse an existing Transport Layer Security TLS connection authenticated with one client certificate for a transaction configured to present a different certificate. A remote attacker could exploit this flaw...

CVE-2026-111812

A flaw was found in Apache Traffic Server's originserverauth plugin. An unauthenticated remote attacker can exploit this vulnerability to force the proxy into signing attacker-controlled Amazon Web Services AWS request headers using the proxy server's own credentials. This allows the attacker to...

CVE-2026-111809

A flaw was found in Apache Traffic Server. An unauthenticated remote attacker can exploit this vulnerability by sending specially crafted HEAD requests containing Content-Length or Transfer-Encoding headers. This flaw enables HTTP request smuggling, where intermediate proxies and backend servers...

CVE-2026-111813

A flaw was found in Apache Traffic Server. When the experimental magick plugin is enabled without argument signing, an unauthenticated remote attacker can control command-line parameters passed to the underlying ImageMagick conversion utility. An attacker could exploit this argument injection fla...

CVE-2026-111811

A flaw was found in Apache Traffic Server. When the experimental tsmemcache plugin is enabled, it fails to enforce authentication on incoming network connections. An unauthenticated remote attacker can exploit this flaw to inspect, modify, or delete entries in the shared proxy cache, leading to...

CVE-2025-31699

A flaw was found in Apache Traffic Server. An unauthenticated remote attacker can send a request with an incomplete body, causing an origin connection to be prematurely returned to the shared pool while the backend is still awaiting data. When a subsequent request is processed over that reused...

[SECURITY] Fedora 45 Update: trafficserver-10.2.1-1.fc45

Traffic Server is a high-performance building block for cloud services. It's more than just a caching proxy server; it also has support for plugins to build large scale web applications. Key features: Caching - Improve your response time, while reducing server load and bandwidth needs by caching...

CLEANSTART-2024-VD19714 Improper Input Validation vulnerability in Apache Traffic Server with malformed HTTP/2 frames

Security vulnerability affects the trafficserver9 package. Improper Input Validation vulnerability in Apache Traffic Server with malformed HTTP/2 frames...

Fedora 45 : trafficserver (2026-84f58bb437)

The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-84f58bb437 advisory. Changes with Apache Traffic Server 10.2.1 - \13553 - originserverauth: Improve log messages - \13567 - Metrics: Revert added locking and annotations...