← Back to browse · API

CVE-2023-39456

Severity
HIGH
CVSS
7.5
EPSS
0.53477
Risk score
48.72
CISA KEV
No
PoC
No
Published
2023-10-17
Modified
2025-06-12
First seen
2026-08-07
Aliases
EUVD-2023-43179, GHSA-FR7H-J3XJ-FVVV
Products
Apache Software Foundation:Apache Traffic Server 9.0.0 ≤9.2.2
Sources
euvd EUVD-2023-43179

Description

Improper Input Validation vulnerability in Apache Traffic Server with malformed HTTP/2 frames.This issue affects Apache Traffic Server: from 9.0.0 through 9.2.2. Users are recommended to upgrade to version 9.2.3, which fixes the issue.

References