PT-2022-10635

CVE-2021-37150

·

Published

2022-08-10

·

Updated

2025-09-08

Description by

CVSS 3.1
4.2
Medium
MetricsAV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions Apache Traffic Server versions 8.0.0 through 9.1.2
Description The issue is related to improper input validation in the header parsing of Apache Traffic Server, allowing an attacker to request secure resources.
Recommendations For Apache Traffic Server versions 8.0.0 through 9.1.2, update to a version that contains a fix for this issue.
Exploitability
Fix
Impacts
Vendors
Affected products
Weakness enumeration
CWE-20: Improper Input Validation
Related identifiers
CVE-2021-37150
DLA-3279-1
DSA-5206-1
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com