Apache Traffic Server Improper Input Validation Vulnerability (CVE-2021-44040)

Description

Improper Input Validation vulnerability in request line parsing of Apache Traffic Server allows an attacker to send invalid requests. This issue affects Apache Traffic Server 8.0.0 to 8.1.3 and 9.0.0 to 9.1.1.

Remediation

References

CVE-2021-44040

Related Vulnerabilities

WordPress Plugin WordPress File Upload Cross-Site Scripting (4.3.3)

Joomla! Core 1.5.x Security Bypass (1.5.0 - 1.5.6)

Liferay Portal Permissions, Privileges, and Access Controls Vulnerability (CVE-2010-5327)

WordPress Plugin Drag and Drop Multiple File Upload-Contact Form 7 Arbitrary File Upload (1.3.5.4)

TYPO3 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2015-8758)

Severity

High

Classification

CVE-2021-44040 CWE-20 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N