CVE-2022-37392

CVE-2022-37392: Apache Traffic Server: Improperly reading the client requests

Vendor Apache Software Foundation
Product Apache Traffic Server
Weakness CWE-754
Published December 19, 2022
Last update April 17, 2025

CVSS base score

What the vulnerability does

Description

Improper Check for Unusual or Exceptional Conditions vulnerability in handling the requests to Apache Traffic Server. This issue affects Apache Traffic Server 8.0.0 to 9.1.2.

Key dates

Disclosure timeline

December 19, 2022 CVE published
April 17, 2025 Record updated