Red Hat Security Advisory

RHSA-2022:8643

varnish security update

Released 2022-11-28 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat CodeReady Linux Builder (v. 9) varnish-devel-6.6.2-2.el9_1.1
Red Hat Enterprise Linux AppStream (v. 9) varnish-6.6.2-2.el9_1.1, varnish-docs-6.6.2-2.el9_1.1

TI-2022-22151 CVE-2022-45060 · GHSA-78x9-jhxm-553x

MEDIUM 41

An HTTP Request Forgery issue was discovered in Varnish Cache 5.x and 6.x before 6.0.11, 7.x before 7.1.2, and 7.2.x before 7.2.1.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01296 Published 2022-11-09 Fixed CWE-20