Threats tagged 'ghsa-j49j-p46f-pfcv'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Critical	9.1	EPSS 1.0%	CVE-2024-35161 · Apache Traffic Server forwards malformed HTTP chunked trailer section to origin servers Critical9.1EPSS 1.0%2024-07-26GCVE Database Apache Traffic Server versions 8.0.0 through 8.1.10 and 9.0.0 through 9.2.4 forward malformed HTTP chunked trailer sections to origin servers. This behavior can be exploited for HTTP request smuggling and may lead to cache poisoning if the origin servers are vulnerable. The issue is fixed in versions 8.1.11 and 9.2.5. A configuration setting is available to mitigate the issue by dropping chunked trailers. EPSS 1.0%Report on CVE-2024-35161 Vulnerability CWE-20 #ghsa-j49j-p46f-pfcv	GCVE Database	2024-07-26

Page 1 of 1