CVE-2022-37392

5.3 mediumEPSS 1.2%

Medium (5.3) in apache traffic server. EPSS 1.2% chance of exploitation in the next 30 days.

Improper Check for Unusual or Exceptional Conditions vulnerability in handling the requests to Apache Traffic Server. This issue affects Apache Traffic Server 8.0.0 to 9.1.2.

Severity

CVSS 3.1

5.3 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

EPSS: 1.2% chance of exploitation in the next 30 days; higher than 67% of CVEs (scores of 2026-10-31)
CWE: CWE-754
Published: 2022-12-19
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

apache:traffic_server

References

https://lists.apache.org/thread/mrj2lg4s0hf027rk7gz8t7hbn9xpfg02
https://lists.apache.org/thread/mrj2lg4s0hf027rk7gz8t7hbn9xpfg02

Check your stack JSON