CVE-2022-31778

CVE-2022-31778: Transfer-Encoding not treated as hop-by-hop

Vendor Apache Software Foundation
Product Apache Traffic Server
Weakness CWE-20 · Input validation
Published August 10, 2022
Last update August 3, 2024
View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

Improper Input Validation vulnerability in handling the Transfer-Encoding header of Apache Traffic Server allows an attacker to poison the cache. This issue affects Apache Traffic Server 8.0.0 to 9.0.2.

Key dates

02Disclosure timeline

August 10, 2022 CVE published
August 3, 2024 Record updated