TI-2022-13673 CVE-2022-31779 · GHSA-449r-qg4g-v772
Improper HTTP/2 scheme and method validation
Priority LOW 38
Improper Input Validation vulnerability in HTTP/2 header parsing of Apache Traffic Server allows an attacker to smuggle requests.
Vulnerabilities
6 records
TI-2022-09337 CVE-2022-25763 · GHSA-mp6g-w483-p43g
Improper input validation on HTTP/2 headers
Priority LOW 37
Improper Input Validation vulnerability in HTTP/2 request validation of Apache Traffic Server allows an attacker to create smuggle or cache poison attacks.
TI-2022-13674 CVE-2022-31780 · GHSA-3jf9-4x8h-72mh
HTTP/2 framing vulnerabilities
Priority LOW 38
Improper Input Validation vulnerability in HTTP/2 frame handling of Apache Traffic Server allows an attacker to smuggle requests.
TI-2022-13672 CVE-2022-31778 · GHSA-w7rf-qxv9-mpv7
Transfer-Encoding not treated as hop-by-hop
Priority LOW 37
Improper Input Validation vulnerability in handling the Transfer-Encoding header of Apache Traffic Server allows an attacker to poison the cache.
TI-2022-10928 CVE-2022-28129 · GHSA-6gv5-5975-mh35
Insufficient Validation of HTTP/1.x Headers
Priority LOW 38
Improper Input Validation vulnerability in HTTP/1.1 header parsing of Apache Traffic Server allows an attacker to send invalid headers.
TI-2021-15216 CVE-2021-37150 · GHSA-qp2r-xr6f-7jm8
Protocol vs scheme mismatch
Priority LOW 37
Improper Input Validation vulnerability in header parsing of Apache Traffic Server allows an attacker to request secure resources.