CVE-2023-30631
14.06.2023, 08:15
Improper Input Validation vulnerability in Apache Software Foundation Apache Traffic Server. The configuration optionproxy.config.http.push_method_enabled didn't function. However, by default the PUSH method is blocked in the ip_allow configuration file.This issue affects Apache Traffic Server: from 8.0.0 through 9.2.0. 8.x users should upgrade to 8.1.7 or later versions 9.x users should upgrade to 9.2.1 or later versionsEnginsight
| Vendor | Product | Version |
|---|---|---|
| apache | traffic_server | 8.0.0 ≤ 𝑥 < 8.1.7 |
| apache | traffic_server | 9.0.0 ≤ 𝑥 < 9.2.1 |
| debian | debian_linux | 10.0 |
| debian | debian_linux | 11.0 |
| debian | debian_linux | 12.0 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
Common Weakness Enumeration
References