Apache Traffic Control’s SQL Injection Meltdown: Averted with a Patch!
Apache Traffic Control users, beware! ASF has patched a critical SQL injection vulnerability (CVE-2024-45387) that allowed privileged users to play “database DJ” with arbitrary SQL commands. If your Traffic Control version is between 8.0.0 and 8.0.1, it’s time to upgrade to 8.0.2. Don’t let SQL injection crash your party!
Hot Take:
Looks like Apache Traffic Control had a little too much SQL punch at the admin party, but don’t worry, ASF has swooped in with a hangover cure in version 8.0.2! Time to update and avoid the dreaded SQL headache.
Key Points:
- Critical SQL injection vulnerability in Apache Traffic Control.
- CVE-2024-45387 with a sky-high CVSS score of 9.9.
- Affects versions 8.0.0 to 8.0.1; patch released in version 8.0.2.
- Allows privileged users to execute arbitrary SQL commands.
- Yuan Luo from Tencent YunDing Security Lab identified the flaw.
Already a member? Log in here