CVE-2022-37392

MEDIUM 5.3CVE-2022-37392 · Published 19/12/2022 · updated 17/06/2026

In short

CVE-2022-37392 is a MEDIUM (CVSS 5.3) vulnerability affecting traffic server (apache).
Chance of exploitation in the next 30 days (EPSS): 1.2%, higher than 67.6% of all vulnerabilities.
Fix: update to 8.1.6, 9.1.4 or later.

Package	Affected versions	Patched versions
traffic server apache	`≥ 8.0.0, < 8.1.6≥ 9.0.0, < 9.1.4`	`8.1.69.1.4`

Description

Improper Check for Unusual or Exceptional Conditions vulnerability in handling the requests to Apache Traffic Server. This issue affects Apache Traffic Server 8.0.0 to 9.1.2.

References

lists.apache.org/thread/mrj2lg4s0hf027rk7gz8t7hbn9xpfg02 · Mailing List

More vulnerabilities in traffic server

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

traffic server

apache

≥ 8.0.0, < 8.1.6≥ 9.0.0, < 9.1.4

8.1.69.1.4

More vulnerabilities in traffic server

See all →