CyberRota Analysis
AI-GeneratedApache Traffic Server versions 10.0.0 through 10.1.3 are vulnerable due to improper handling of HTTP/2 origin trailers when converting to HTTP/1, potentially leading to data corruption or exposure. This high-severity vulnerability (CVSS 8.3) should be prioritized by organizations using affected versions, particularly those handling sensitive data or relying on HTTP/2 functionality. Users are advised to upgrade to version 9.2.15 or 10.1.4 to mitigate the risk.
Original NVD Description
Apache Traffic Server forwards HTTP/2 origin trailers to HTTP/1 clients without proper chunked framing when converting HTTP/2 to HTTP/1. This issue affects Apache Traffic Server: from 10.0.0 through 10.1.3. Users are recommended to upgrade to version 9.2.15 or 10.1.4, which fix the issue.
Related CVEs
Other vulnerabilities affecting the same vendor(s)