Apache Traffic Control
Approved changes feed: RSS · Atom
cpe:2.3:a:apache_software_foundation:apache_traffic_control:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Apache Software Foundation (f563070d-e18f-561b-b86c-987936937e8a) |
|---|---|
| Product | Apache Traffic Control (ca146856-c071-56b9-be5c-87088bfd7271) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-61581 |
vulnerable | 2026-06-08 07:37:27.590066 |
Apache Traffic Control: ReDoS issue in Traffic Router configuration
** UNSUPPORTED WHEN ASSIGNED ** Inefficient Regular Expression Complexity vulnerability in Apache Traffic Control.
This issue affects Apache Traffic Control: all versions.
People with access to the management interface of the Traffic Router component could specify malicious patterns and cause unavailability.
As this project is retired, we do not plan to release a version that fixes this issue. Users are recommended to find an alternative or restrict access to the instance to trusted users.
NOTE: This vulnerability only affects products that are no longer supported by the maintainer.
Published: 2025-10-16T08:40:11.865Z
Updated: 2025-11-04T21:13:58.992Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-45387 |
vulnerable | 2026-06-08 06:48:06.019189 |
Apache Traffic Control: SQL Injection in Traffic Ops endpoint PUT deliveryservice_request_comments
CRITICAL (9.9)
An SQL injection vulnerability in Traffic Ops in Apache Traffic Control <= 8.0.1, >= 8.0.0 allows a privileged user with role "admin", "federation", "operations", "portal", or "steering" to execute arbitrary SQL against the database by sending a specially-crafted PUT request.
Users are recommended to upgrade to version Apache Traffic Control 8.0.2 if you run an affected version of Traffic Ops.
Published: 2024-12-23T15:30:13.873Z
Updated: 2024-12-24T01:47:40.228Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-23206 |
vulnerable | 2026-06-08 05:40:56.595061 |
Server-Side Request Forgery in Traffic Ops endpoint POST /user/login/oauth
In Apache Traffic Control Traffic Ops prior to 6.1.0 or 5.1.6, an unprivileged user who can reach Traffic Ops over HTTPS can send a specially-crafted POST request to /user/login/oauth to scan a port of a server that Traffic Ops can reach.
Published: 2022-02-06T15:15:10.000Z
Updated: 2024-08-03T03:36:20.177Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-43350 |
vulnerable | 2026-06-08 05:36:43.281132 |
LDAP filter injection vulnerability in Traffic Ops
An unauthenticated Apache Traffic Control Traffic Ops user can send a request with a specially-crafted username to the POST /login endpoint of any API version to inject unsanitized content into the LDAP filter.
Published: 2021-11-11T13:00:15.000Z
Updated: 2024-08-04T03:55:28.477Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-42009 |
vulnerable | 2026-06-08 05:35:21.372113 |
Apache Traffic Control Traffic Ops Email Injection Vulnerability
An authenticated Apache Traffic Control Traffic Ops user with Portal-level privileges can send a request with a specially-crafted email subject to the /deliveryservices/request Traffic Ops endpoint to send an email, from the Traffic Ops server, with an arbitrary body to an arbitrary email address. Apache Traffic Control 5.1.x users should upgrade to 5.1.3 or 6.0.0. 4.1.x users should upgrade to 5.1.3.
Published: 2021-10-12T07:40:11.000Z
Updated: 2024-08-04T03:22:25.843Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-7670 |
vulnerable | 2026-06-08 05:10:05.770542 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.