Back to CVE List

CVE-2025-65114

HIGH SEVERITY

CVSS Score & Metrics

Base Score
7.5 / 10
Vector String
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Vulnerability Description

Apache Traffic Server allows request smuggling if chunked messages are malformed. 

This issue affects Apache Traffic Server: from 9.0.0 through 9.2.12, from 10.0.0 through 10.1.1.

Users are recommended to upgrade to version 9.2.13 or 10.1.2, which fix the issue.

Vulnerability Details

Published Date
Last Modified
CWE ID
CWE-444
Source
NVD
Vendor
Apache Software Foundation
Product
Apache Traffic Server

External References

Discussion (0)

Add Comment

No comments yet. Be the first!