CVE-2021-32565

CVE-2021-32565: HTTP Request Smuggling, content length with invalid charters

Vendor Apache Software Foundation
Product Apache Traffic Server
Weakness CWE-444
Published June 29, 2021
Last update August 3, 2024
View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

Invalid values in the Content-Length header sent to Apache Traffic Server allows an attacker to smuggle requests. This issue affects Apache Traffic Server 7.0.0 to 7.1.12, 8.0.0 to 8.1.1, 9.0.0 to 9.0.1.

Key dates

02Disclosure timeline

June 29, 2021 CVE published
August 3, 2024 Record updated