← Database

CVE-2021-37149

HIGH CVSS: 7.5 Published: 2021-11-03 Modified: 2026-06-17

Description

Improper Input Validation vulnerability in header parsing of Apache Traffic Server allows an attacker to smuggle requests. This issue affects Apache Traffic Server 8.0.0 to 8.1.2 and 9.0.0 to 9.1.0.

Affected Platforms

Apache Traffic ServerDebian Debian Linux

Weakness Type

CWE-20, CWE-20

References