摘要:
Improper Input Validation vulnerability in HTTP/2 request validation of Apache Traffic Server allows an attacker to create smuggle or cache poison attacks. This issue affects Apache Traffic Server 8.0.0 to 9.1.2.
安全等级: Low
公告ID: KylinSec-SA-2024-1574
发布日期: 2024年5月27日
关联CVE: CVE-2022-25763
Improper Input Validation vulnerability in HTTP/2 request validation of Apache Traffic Server allows an attacker to create smuggle or cache poison attacks. This issue affects Apache Traffic Server 8.0.0 to 9.1.2.
| cve名称 | 产品 | 组件 | 是否受影响 |
|---|---|---|---|
| CVE-2022-25763 | KY3.4-4A | trafficserver | Unaffected |
| CVE-2022-25763 | KY3.4-5A | trafficserver | Unaffected |
| CVE-2022-25763 | KY3.5.1 | trafficserver | Unaffected |
| CVE-2022-25763 | KY3.5.2 | trafficserver | Unaffected |
| CVE-2022-25763 | V6 | trafficserver | Unaffected |
