Vulnerabilities

TI-2022-19371 CVE-2022-40743 · GHSA-q99x-rwh5-433q

Apache Traffic Server: Security issues with the xdebug plugin

LOW 30

Improper Input Validation vulnerability for the xdebug plugin in Apache Software Foundation Apache Traffic Server can lead to cross site scripting and cache poisoning attacks.This issue affects Apache Traffic Server: 9.0…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01149 Published 2022-12-19 No fix listed CWE-79

TI-2022-17466 CVE-2022-37392 · GHSA-76q2-v43x-gmjh

Apache Traffic Server: Improperly reading the client requests

LOW 32

Improper Check for Unusual or Exceptional Conditions vulnerability in handling the requests to Apache Traffic Server.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01175 Published 2022-12-19 No fix listed CWE-754

TI-2022-14295 CVE-2022-32749 · GHSA-mgj6-q8hw-4xh2

Apache Traffic Server: Improperly handled requests can cause crashes in specific plugins

MEDIUM 42

Improper Check for Unusual or Exceptional Conditions vulnerability handling requests in Apache Traffic Server allows an attacker to crash the server under certain conditions.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01386 Published 2022-12-19 No fix listed CWE-754

Vulnerabilities

Filters

Apache Traffic Server: Security issues with the xdebug plugin

Apache Traffic Server: Improperly reading the client requests

Apache Traffic Server: Improperly handled requests can cause crashes in specific plugins