CVE-2021-27577
Assigner: apache
Published: 2021-06-29T11:45:19
State: PUBLISHED
affected: product: Apache Traffic Server
vendor: Apache Software Foundation
versions: status: affected
version: Apache Traffic Server 7.0.0 to 7.1.12, 8.0.0 to 8.1.1, 9.0.0 to 9.0.1
descriptions: value: Incorrect handling of url fragment vulnerability of Apache Traffic Server allows an attacker to poison the cache. This issue affects Apache Traffic Server 7.0.0 to 7.1.12, 8.0.0 to 8.1.1, 9.0.0 to 9.0.1.
problemTypes: descriptions: cweId: CWE-444
description: CWE-444 Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
type: CWE
source: discovery: UNKNOWN
title: Incorrect handling of url fragment leads to cache poisoning
x_generator: engine: Vulnogram 0.0.9