CVE-2021-32565

HIGH · CVSS 7.5 EPSS 2.14%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2021-06-29 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2021-32565

Severity

HIGH

CVSS

7.5

EPSS

2.14%

Apache

Original NVD Description

Invalid values in the Content-Length header sent to Apache Traffic Server allows an attacker to smuggle requests. This issue affects Apache Traffic Server 7.0.0 to 7.1.12, 8.0.0 to 8.1.1, 9.0.0 to 9.0.1.