Vulnerability CVE-2022-40743


Published: 2022-12-19

Description:
Improper Input Validation vulnerability for the xdebug plugin in Apache Software Foundation Apache Traffic Server can lead to cross site scripting and cache poisoning attacks.This issue affects Apache Traffic Server: 9.0.0 to 9.1.3. Users should upgrade to 9.1.4 or later versions.

Type:

CWE-20

(Improper Input Validation)

 References:
https://lists.apache.org/thread/mrj2lg4s0hf027rk7gz8t7hbn9xpfg02

Copyright 2026, cxsecurity.com

 

Back to Top