← Database

CVE-2021-37147

HIGH CVSS: 7.5 Published: 2021-11-03 Modified: 2026-06-17

Description

Improper input validation vulnerability in header parsing of Apache Traffic Server allows an attacker to smuggle requests. This issue affects Apache Traffic Server 8.0.0 to 8.1.2 and 9.0.0 to 9.1.0.

Affected Platforms

Apache Traffic ServerDebian Debian Linux

Weakness Type

CWE-20, CWE-444, CWE-20, CWE-444

References