{"schema_version": "1.6.1", "id": "CVE-2024-38479", "summary": "Cache key plugin is vulnerable to cache poisoning attack", "details": "Improper Input Validation vulnerability in Apache Traffic Server.\n\nThis issue affects Apache Traffic Server: from 8.0.0 through 8.1.11, from 9.0.0 through 9.2.5.\n\nUsers are recommended to upgrade to version 9.2.6, which fixes the issue, or 10.0.2, which does not have the issue.", "affected": [{"ranges": [{"type": "SEMVER", "events": [{"introduced": "8.0.0"}, {"last_affected": "8.0.0"}]}, {"type": "SEMVER", "events": [{"introduced": "9.0.0"}, {"last_affected": "9.0.0"}]}]}], "references": [{"type": "WEB", "url": "https://lists.apache.org/thread/y15fh6c7kyqvzm0f9odw7c5jh4r4np0y"}]}