CVE-2024-53868
CVSS 3.1 Score 7.5 of 10 (high)
Details
Published Apr 3, 2025
Updated: Apr 18, 2025
CWE ID 444
Summary
CVE-2024-53868 is a vulnerability affecting Apache Traffic Server versions 9.2.0 through 9.2.9 and 10.0.0 through 10.0.4. This issue allows for request smuggling when chunked messages are malformed. Attackers can exploit this vulnerability to perform unintended actions, potentially leading to security breaches or data theft. To mitigate this risk, it is recommended that users upgrade to Apache Traffic Server versions 9.2.10 or 10.0.5, which have been released to address the issue.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Apache Traffic Server
Affected Vendors
- Apache Software Foundation