Approved changes feed: RSS · Atom

cpe:2.3:a:apache:traffic_server:6.2.1:rc0:*:*:*:*:*:*

part: a version: 6.2.1 update: rc0

VendorApache (b0303047-b7dd-5cf8-abcc-71b7d9d80b95)
ProductTraffic Server (c0ff314f-21c5-5e35-91ea-c5f580192191)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:apache/trafficserver purl2cpe 2026-06-01 10:14:32.811373
pkg:deb/debian/trafficserver purl2cpe 2026-06-01 10:14:32.811374
pkg:deb/ubuntu/trafficserver purl2cpe 2026-06-01 10:14:32.811375
pkg:github/alibaba/trafficserver purl2cpe 2026-06-01 10:14:32.811377
pkg:github/apache/trafficserver purl2cpe 2026-06-01 10:14:32.811378
pkg:maven/org.apache.trafficserver/trafficserver purl2cpe 2026-06-01 10:14:32.811379
pkg:rpm/opensuse/apache-trafficserver purl2cpe 2026-06-01 10:14:32.811381

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2017-5660 vulnerable 2026-06-08 05:09:47.783681 Details available
There is a vulnerability in Apache Traffic Server (ATS) 6.2.0 and prior and 7.0.0 and prior with the Host header and line folding. This can have issues when interacting with upstream proxies and the wrong host being used.
Published: 2018-02-27T20:00:00.000Z
Updated: 2024-09-17T00:37:13.932Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.