CVE-2017-5660

—

CVSS 3.0

8.6 high

EPSS

2%p79

Published

Feb 27, 2018 (Feb 27, 2018)

Modified

Jun 17, 2026

Description

There is a vulnerability in Apache Traffic Server (ATS) 6.2.0 and prior and 7.0.0 and prior with the Host header and line folding. This can have issues when interacting with upstream proxies and the wrong host being used.

Vendors: apache debian
Products: traffic server, debian linux
Weakness: CWE-20
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N

NVD CVE.org GitHub PoCs EPSS (1.9%)

In the news0 stories

No ingested article mentions this CVE yet.