title: Incorrect handling of url fragment leads to cache poisoning
description: Incorrect handling of url fragment vulnerability of Apache Traffic Server allows an attacker to poison the cache. This issue affects Apache Traffic Server 7.0.0 to 7.1.12, 8.0.0 to 8.1.1, 9.0.0 to 9.0.1.
problem types: CWE-444 Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
affected:
{
product: Apache Traffic Server
vendor: Apache Software Foundation
versions:
status: affected, version: Apache Traffic Server 7.0.0 to 7.1.12, 8.0.0 to 8.1.1, 9.0.0 to 9.0.1
}