VDB
CVE-2024-45387
CVE-2024-45387
PUBLISHED
CVSS 9.899999618530273 CRITICAL
SQL injection in Apache Traffic Control
EPSS 42.23% · 98.7th percentile
Risk Scores
CVSS 3.1
9.899999618530273
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
EPSS Score
42.23%
98.7th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Apache Software Foundation | Apache Traffic Control | 8.0.0, 7.0.0, 8.0.0 |
| apache | traffic_control | 8.0.0, 8.0.0 |
| github.com | apache/trafficcontrol/v8 | 8.0.0, 8.0.0 |
Timeline
- Dec 23, 2024 CVE Published
- Dec 23, 2024 PoC Published
- Dec 24, 2024 EPSS Score
- Dec 25, 2024 PoC Published
- Dec 25, 2024 PoC Published
- Dec 25, 2024 PoC Published
- Dec 25, 2024 PoC Published
- Dec 25, 2024 PoC Published
- Dec 25, 2024 PoC Published
- Dec 26, 2024 PoC Published
- Dec 26, 2024 PoC Published
- Dec 26, 2024 PoC Published
References
- https://github.com/apache/trafficcontrol/releases/tag/v8.0.2 fix
- https://lists.apache.org/thread/t38nk5n7t8w3pb66z7z4pqfzt4443trr vendor-advisory
- http://www.openwall.com/lists/oss-security/2024/12/23/3 url
- https://nvd.nist.gov/vuln/detail/CVE-2024-45387 advisory
- https://github.com/apache/trafficcontrol package