CVE-2018-8004

6.5 mediumEPSS 6.3%

Medium (6.5). EPSS 6.3% chance of exploitation in the next 30 days.

There are multiple HTTP smuggling and cache poisoning issues when clients making malicious requests interact with Apache Traffic Server (ATS). This affects versions 6.0.0 to 6.2.2 and 7.0.0 to 7.1.3. To resolve this issue users running 6.x should upgrade to 6.2.3 or later versions and 7.x users should upgrade to 7.1.4 or later versions.

Severity

CVSS 3.0

6.5 medium

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

EPSS: 6.3% chance of exploitation in the next 30 days; higher than 93% of CVEs (scores of 2026-10-31)
CWE: CWE-444
Published: 2018-08-29
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

apache:traffic_server
debian:debian_linux

References

http://www.securityfocus.com/bid/105192
https://github.com/apache/trafficserver/pull/3192
https://github.com/apache/trafficserver/pull/3201
https://github.com/apache/trafficserver/pull/3231
https://github.com/apache/trafficserver/pull/3251

Check your stack JSON