Vulnerability Database

289,599

Total vulnerabilities in the database

CVE-2018-11783

sslheaders plugin extracts information from the client certificate and sets headers in the request based on the configuration of the plugin. The plugin doesn't strip the headers from the request in some scenarios. This problem was discovered in versions 6.0.0 to 6.0.3, 7.0.0 to 7.1.5, and 8.0.0 to 8.0.1.

  • Published: Mar 7, 2019
  • Updated: Apr 13, 2023
  • CVE: CVE-2018-11783
  • Severity: High
  • Exploit:

CVSS v3:

  • Severity: High
  • Score: 7.5
  • AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CVSS v2:

  • Severity: Medium
  • Score: 5
  • AV:N/AC:L/Au:N/C:P/I:N/A:N

CWEs:

Software From Fixed in
apache / traffic_server 8.0.0 8.0.1.x
apache / traffic_server 6.0.0 6.0.3.x
apache / traffic_server 7.0.0 7.1.5.x