← Database

CVE-2022-25763

HIGH CVSS: 7.5 Published: 2022-08-10 Modified: 2026-06-17

Description

Improper Input Validation vulnerability in HTTP/2 request validation of Apache Traffic Server allows an attacker to create smuggle or cache poison attacks. This issue affects Apache Traffic Server 8.0.0 to 9.1.2.

Affected Platforms

Apache Traffic ServerFedoraproject FedoraDebian Debian Linux

Weakness Type

CWE-444, CWE-444

References