High severity7.5NVD Advisory· Published Jun 14, 2023· Updated Jun 17, 2026
CVE-2023-30631
CVE-2023-30631
Description
Improper Input Validation vulnerability in Apache Software Foundation Apache Traffic Server. The configuration option proxy.config.http.push_method_enabled didn't function. However, by default the PUSH method is blocked in the ip_allow configuration file.This issue affects Apache Traffic Server: from 8.0.0 through 9.2.0.
8.x users should upgrade to 8.1.7 or later versions 9.x users should upgrade to 9.2.1 or later versions
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
9cpe:2.3:a:apache:traffic_server:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:apache:traffic_server:*:*:*:*:*:*:*:*range: >=8.0.0,<8.1.7
- (no CPE)range: 8.0.0
- (no CPE)range: 8.0.0 - 9.2.0
cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*
- cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:*
- Range: 8.0.0 - 9.2.0
Patches
Vulnerability mechanics
References
5- lists.apache.org/thread/tns2b4khyyncgs5v5p9y35pobg9z2bvsnvdMailing ListVendor Advisory
- lists.debian.org/debian-lts-announce/2023/06/msg00037.htmlnvdMailing ListThird Party Advisory
- www.debian.org/security/2023/dsa-5435nvdThird Party Advisory
- lists.fedoraproject.org/archives/list/[email protected]/message/6GDCBNFDDW6ULW7CACJCPENI7BVDHM5O/nvdMailing List
- lists.fedoraproject.org/archives/list/[email protected]/message/FGWXNAEEVRUZ5JG4EJAIIFC3CI7LFETV/nvdMailing List
News mentions
0No linked articles in our index yet.