CVE-2022-37392

CVE-2022-37392: Apache Traffic Server: Improperly reading the client requests

Vendor Apache Software Foundation

Product Apache Traffic Server

Weakness CWE-754

Published December 19, 2022

Last update April 17, 2025

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

Improper Check for Unusual or Exceptional Conditions vulnerability in handling the requests to Apache Traffic Server. This issue affects Apache Traffic Server 8.0.0 to 9.1.2.

Key dates

02Disclosure timeline

December 19, 2022 CVE published

April 17, 2025 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2022-37392 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/754.html AskarLabs — CWE-754 write-up Improper Check for Unusual or Exceptional Conditions

Related vulnerabilities

04Related CVE

CVE-2025-13080 Drupal core - Moderately critical - Denial of Service - SA-CORE-2025-005 CVE-2026-0944 Group invite - Moderately critical - Access bypass - SA-CONTRIB-2026-001 CVE-2025-14840 HTTP Client Manager - Less critical - Information disclosure - SA-CONTRIB-2025-126 CVE-2026-5343 SAML SSO - Service Provider - Critical - Authentication bypass - SA-CONTRIB-2026-031 CVE-2026-8491 Node View Permissions - Moderately critical - Access bypass - SA-CONTRIB-2026-034