High severity7.5NVD Advisory· Published Aug 9, 2023· Updated Jun 17, 2026

CVE-2022-47185

Description

Improper input validation vulnerability on the range header in Apache Software Foundation Apache Traffic Server.This issue affects Apache Traffic Server: through 9.2.1.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Apache/Apache Traffic Serverllm-create
Range: <=9.2.1
Apache/trafficservercpe-rescue2 versions
0+ 1 more
- (no CPE)range: 0
- cpe:2.3:a:apache:traffic_server:*:*:*:*:*:*:*:*range: >=8.0.0,<=8.1.7

Patches

Vulnerability mechanics

References

lists.apache.org/thread/jsl6dfdgs1mjjo1mbtyflyjr7xftswhcnvdMailing ListVendor Advisory
lists.debian.org/debian-lts-announce/2023/09/msg00042.htmlnvd
lists.fedoraproject.org/archives/list/[email protected]/message/BOTOM2MFKOLK46Q3BQHO662HTPZFRQUC/nvd
www.debian.org/security/2023/dsa-5549nvd

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000