CVE:CVE-2022-45059
CNNVD:CNNVD-202211-2416
Varnish Cache是一套反向网站缓存服务器。
Varnish Cache 7.x版本至7.1.2之前版本、7.2.x版本至7.2.1之前版本存在环境问题漏洞。攻击者利用该漏洞绕过VCL中的主机路由请求。
solution:Upgrade varnish_cache_project varnish_cache to a higher version than 7.1.2,7.2.0,and avoid the version [7.0.0,7.1.2),7.2.0; Upgrade fedoraproject fedora to a higher version than 35,36,37,and avoid the version 35,36,37