CVE-2021-37148

CVE-2021-37148: Request Smuggling - transfer encoding validation

Vendor Apache Software Foundation
Product Apache Traffic Server
Weakness CWE-20 · Input validation
Published November 3, 2021
Last update August 4, 2024
View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

Improper input validation vulnerability in header parsing of Apache Traffic Server allows an attacker to smuggle requests. This issue affects Apache Traffic Server 8.0.0 to 8.1.2 and 9.0.0 to 9.0.1.

Key dates

02Disclosure timeline

November 3, 2021 CVE published
August 4, 2024 Record updated