Apache Traffic Server Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability - CVE-2022-40743 - Vulnerability Database

Apache Traffic Server Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability - CVE-2022-40743

Medium

Reference: CVE-2022-40743

NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2022-40743

Title: Apache Traffic Server Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability

Overview:

Improper Input Validation vulnerability for the xdebug plugin in Apache Software Foundation Apache Traffic Server can lead to cross site scripting and cache poisoning attacks.This issue affects Apache Traffic Server: 9.0.0 to 9.1.3. Users should upgrade to 9.1.4 or later versions.