tocsin

Debian/trafficserver: high 7.5

Incorrect handling of url fragment vulnerability of Apache Traffic Server allows an attacker to poison the cache. This issue affects Apache Traffic Server 7.0.0 to 7.1.12, 8.0.0 to 8.1.1, 9.0.0 to 9.0

Action: Upgrade trafficserver to 8.1.1+ds-1.1 or later.

Affected

introducedfixedlast affected
08.1.1+ds-1.1-

Fixed versions

8.1.1+ds-1.1

Sources

published · modified · JSON