imPC@ndo IT

Tracker / CVE-2023-30631

CVE-2023-30631

High 7.5

Improper Input Validation vulnerability in Apache Software Foundation Apache Traffic Server.  The configuration option proxy.config.http.push_method_enabled didn't function.  However, by default the PUSH method is blocked in the ip_allow configuration file.This issue affects Apache Traffic Server: from 8.0.0 through 9.2.0. 8.x users should upgrade to 8.1.7 or later versions 9.x users should upgrade to 9.2.1 or later versions

Affected products and versions

apache traffic_server · 8.0.0 → 8.1.7
apache traffic_server · 9.0.0 → 9.2.1
debian debian_linux
fedoraproject fedora

Analysis

This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.

References