Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-05527
HistoryOct 15, 2021 - 12:00 a.m.

Apache Traffic Control input validation error vulnerability

2021-10-1500:00:00
China National Vulnerability Database
www.cnvd.org.cn
5

0.001 Low

EPSS

Percentile

40.4%

Apache Traffic Control is a distributed and scalable content distribution solution from the Apache Foundation. Apache Traffic Control Traffic Ops is vulnerable to an input validation error, which is caused when an authenticated Apache Traffic Control Traffic Ops user with portal-level privileges can send a request with a specially crafted email that email is bound by the /deliveryservices/request Traffic Ops endpoint to send an email with arbitrary body text from the Traffic Ops server to an arbitrary email address. No details of the vulnerability are currently available.

0.001 Low

EPSS

Percentile

40.4%

Related for CNVD-2022-05527