Skip to content
OpenAdvisories

Package · Go

github.com/apache/trafficcontrol

8 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 4.3
    CVE-2021-42009

    Apache Traffic Control Traffic Ops Email Injection Vulnerability

    An authenticated Apache Traffic Control Traffic Ops user with Portal-level privileges can send a request with a specially-crafted email subject to the /deliveryservices/request Traffic Ops endpoint to send an email, from the Traffic Ops server, with an arbitr…

    Apache Software Foundation Apache Traffic Control github.com/apache/trafficcontrol Go
  • Medium 5.8
    CVE-2020-17522

    Cache Manipulation Attack in Apache Traffic Control

    When ORT (now via atstccfg) generates ip_allow.config files in Apache Traffic Control 3.0.0 to 3.1.0 and 4.0.0 to 4.1.0, those files include permissions that allow bad actors to push arbitrary content into and remove arbitrary content from CDN cache servers. …

    github.com/apache/trafficcontrol Go