SQL injection in Apache Traffic Control

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2024-45387 · ADVISORY
• apache/trafficcontrol · PACKAGE
• apache/trafficcontrol release v8.0.2 · WEB
• lists.apache.org/thread/t38nk5n7t8w3pb66z7z4pqfzt4443trr · WEB
• openwall.com/lists/oss-security/2024/12/23/3 · WEB
• GitHub Advisory GHSA-vq94-9pfv-ccqr · ADVISORY

github.com/apache/trafficcontrol のその他の脆弱性

• CVE-2025-61581高 7.5** UNSUPPORTED WHEN ASSIGNED ** Inefficient Regular Expression Complexity vulnerability in Apache Traffic Control. This issue affects Apach…
• CVE-2022-23206高 7.5In Apache Traffic Control Traffic Ops prior to 6.1.0 or 5.1.6, an unprivileged user who can reach Traffic Ops over HTTPS can send a speciall…
• CVE-2021-43350緊急 9.8An unauthenticated Apache Traffic Control Traffic Ops user can send a request with a specially-crafted username to the POST /login endpoint …
• CVE-2021-42009中 4.3An authenticated Apache Traffic Control Traffic Ops user with Portal-level privileges can send a request with a specially-crafted email subj…
• CVE-2020-17522中 5.8When ORT (now via atstccfg) generates ip_allow.config files in Apache Traffic Control 3.0.0 to 3.1.0 and 4.0.0 to 4.1.0, those files include…