Alpine/varnish: high 7.5
An HTTP Request Forgery issue was discovered in Varnish Cache 5.x and 6.x before 6.0.11, 7.x before 7.1.2, and 7.2.x before 7.2.1. An attacker may introduce characters through HTTP/2 pseudo-headers th
Action: Upgrade varnish to 7.2.1-r0 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 7.2.1-r0 | - |
Fixed versions
| 7.2.1-r0 |
Sources
- osv: ALPINE-CVE-2022-45060#Alpine:v3.24/varnish
- https://security.alpinelinux.org/vuln/CVE-2022-45060
published · modified · JSON