CyberRota Analysis
AI-GeneratedApache Traffic Server versions 8.0.0 to 8.1.9, 9.0.0 to 9.2.14, and 10.0.0 to 10.1.3 are vulnerable to a redirect-limit bypass that allows for SSRF amplification due to plugins resetting the retry counter. This vulnerability poses a high risk, potentially enabling attackers to exploit server-side request forgery (SSRF) vulnerabilities. Organizations using affected versions should prioritize upgrading to versions 9.2.15 or 10.1.4 to mitigate this risk.
Original NVD Description
Apache Traffic Server allows redirect-limit bypass when plugins reset the retry counter, enabling SSRF amplification. This issue affects Apache Traffic Server: from 8.0.0 through 8.1.9, from 9.0.0 through 9.2.14, from 10.0.0 through 10.1.3. Users are recommended to upgrade to version 9.2.15 or 10.1.4, which fix the issue.
Related CVEs
Other vulnerabilities affecting the same vendor(s)