Lucene search
Veracode Vulnerability DatabaseVERACODE:36775HistoryAug 21, 2022 - 2:46 a.m.
Cross-site Scripting (XSS)
2022-08-2102:46:35
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
4
0.002 Low
EPSS
Percentile
60.0%
trafficserver is vulnerable to cross-site scripting attacks. Vulnerability exists due to improper Input validation in handling the transfer-encoding header of apache traffic server allows an attacker to poison the cache.
Related
ubuntucve
ubuntucve
CVE-2022-31778
2022-08-10 00:00:00
cnvd
cnvd
Apache Traffic Server Input Validation Error Vulnerability (CNVD-2023-03925)
2022-08-15 00:00:00
openvas
openvas
Apache Traffic Server (ATS) 8.0.0 <= 8.1.4 Improper Input Validation Vulnerability
2022-08-11 00:00:00
Debian: Security Advisory (DLA-3385-1)
2023-04-11 00:00:00
Debian: Security Advisory (DSA-5206-1)
2022-08-14 00:00:00
cvelist
cvelist
CVE-2022-31778 Transfer-Encoding not treated as hop-by-hop
2022-08-10 00:00:00
debiancve
debiancve
CVE-2022-31778
2022-08-10 06:15:08
osv
osv
CVE-2022-31778
2022-08-10 06:15:08
trafficserver - security update
2023-04-05 00:00:00
trafficserver - security update
2022-08-12 00:00:00
nvd
nvd
CVE-2022-31778
2022-08-10 06:15:08
prion
prion
Input validation
2022-08-10 06:15:00
cve
cve
CVE-2022-31778
2022-08-10 06:15:08
nessus
nessus
Debian DLA-3385-1 : trafficserver - LTS security update
2023-04-10 00:00:00
Debian DSA-5206-1 : trafficserver - security update
2022-08-13 00:00:00
debian
debian
[SECURITY] [DLA 3385-1] trafficserver security update
2023-04-05 22:00:47
[SECURITY] [DSA 5206-1] trafficserver security update
2022-08-12 15:05:18