High severity7.5NVD Advisory· Published Jan 11, 2021· Updated Jun 17, 2026

CVE-2020-17508

Description

The ATS ESI plugin has a memory disclosure vulnerability. If you are running the plugin please upgrade. Apache Traffic Server versions 7.0.0 to 7.1.11 and 8.0.0 to 8.1.0 are affected.

Affected products

Apache/trafficserver
cpe:2.3:a:apache:traffic_server:*:*:*:*:*:*:*:*
Range: >=6.0.0,<=6.2.3
Apache Traffic Server/ATS ESI plugindescription
Apache/ATS ESI pluginllm-fuzzy
Apache/Apache Traffic Serverllm-fuzzy

Patches

Vulnerability mechanics

References

lists.apache.org/thread.html/r65434f7acca3aebf81b0588587149c893fe9f8f9f159eaa7364a70ff%40%3Cannounce.trafficserver.apache.org%3EnvdMailing ListVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000