Approved changes feed: RSS · Atom

cpe:2.3:a:apache:traffic_control:6.0.1:rc0:*:*:*:*:*:*

part: a version: 6.0.1 update: rc0

VendorApache (b0303047-b7dd-5cf8-abcc-71b7d9d80b95)
ProductTraffic Control (e823bf59-9302-59d2-a1a5-fc04830fc269)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:apache/trafficcontrol purl2cpe 2026-06-01 10:14:33.170099
pkg:github/apache/trafficcontrol purl2cpe 2026-06-01 10:14:33.170100
pkg:pypi/apache-trafficcontrol purl2cpe 2026-06-01 10:14:33.170101

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-43350 vulnerable 2026-06-08 05:36:43.283510 LDAP filter injection vulnerability in Traffic Ops
An unauthenticated Apache Traffic Control Traffic Ops user can send a request with a specially-crafted username to the POST /login endpoint of any API version to inject unsanitized content into the LDAP filter.
Published: 2021-11-11T13:00:15.000Z
Updated: 2024-08-04T03:55:28.477Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.