{"id":"CVE-2024-53868","summary":"Apache Traffic Server: Malformed chunked message body allows request smuggling","details":"Apache Traffic Server allows request smuggling if chunked messages are malformed. \n\n\n\n\n\nThis issue affects Apache Traffic Server: from 9.2.0 through 9.2.9, from 10.0.0 through 10.0.4.\n\nUsers are recommended to upgrade to version 9.2.10 or 10.0.5, which fixes the issue.","modified":"2026-08-12T03:51:38.538022139Z","published":"2025-04-03T08:59:02.557Z","database_specific":{"cwe_ids":["CWE-444"],"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/53xxx/CVE-2024-53868.json","unresolved_ranges":[{"source":"AFFECTED_FIELD","extracted_events":[{"introduced":"9.2.0"},{"last_affected":"9.2.9"},{"introduced":"10.0.0"},{"last_affected":"10.0.4"}]},{"extracted_events":[{"introduced":"9.2.0"},{"fixed":"9.2.9"},{"introduced":"10.0.0"},{"fixed":"10.0.4"}],"source":"DESCRIPTION"}],"cna_assigner":"apache"},"references":[{"type":"WEB","url":"http://www.openwall.com/lists/oss-security/2025/04/02/4"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/53xxx/CVE-2024-53868.json"},{"type":"ADVISORY","url":"https://lists.apache.org/thread/rwyx91rsrnmpjbm04footfjjf6m9d1c9"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2024-53868"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/apache/trafficserver","events":[{"introduced":"b14030656330ed623cd1f9efe2f4f9abd9d16e29"},{"fixed":"61b7d4239091b7067284c22ca15e8b69f2ce43bb"},{"introduced":"3fa146678bc6a061722f4ea930998ae29ad70de3"},{"fixed":"f866b6a0af5c74ac86d7fb62def7d397aece4605"}],"database_specific":{"cpe":"cpe:2.3:a:apache:traffic_server:*:*:*:*:*:*:*:*","extracted_events":[{"introduced":"9.0.0"},{"fixed":"9.2.10"},{"introduced":"10.0.0"},{"fixed":"10.0.5"}],"source":"CPE_RANGE"}}],"versions":["10.0.4-rc0","10.0.4","10.0.3-rc1","10.0.3","10.0.3-rc0","10.0.2-rc0","10.0.2","10.0.1-rc1","10.0.1","10.0.1-rc0","10.0.0-rc0","10.0.0"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-53868.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"}]}