Apache Traffic Server: Vulnerability in Field Names Allows Request Smuggling and Cache Poisoning

CVE-2023-38522

Summary

Apache Traffic Server allows the acceptance of non-standard characters in HTTP field names, which can lead to the forwarding of malformed requests to origin servers. This behavior poses serious risks, including the potential for request smuggling attacks, where adversaries can manipulate the flow of requests to deceive application logic. Additionally, if the origin servers have their own vulnerabilities, this exploitation could facilitate cache poisoning, impacting the integrity and availability of cached content. Users are advised to upgrade to the patched versions (8.1.11 or 9.2.5) to mitigate these risks.

References