CVE-2024-56202

Apache Traffic Server: Expect header field can unreasonably retain resource

Expected Behavior Violation vulnerability in Apache Traffic Server. This issue affects Apache Traffic Server: from 9.0.0 through 9.2.8, from 10.0.0 through 10.0.3. Users are recommended to upgrade to versions 9.2.9 or 10.0.4 or newer, which fixes the issue.

We have discovered 308 live websites that are affected by CVE-2024-56202.

Run a Free Instant Scan



Affected Software

Product  ATS
Category Web Servers
Vulnerable Domains308 live websites (30% of ATS install base)
Vulnerable Versions
  • from 9 through 9.2.8
  • from 10 through 10.0.3
Vulnerable Versions Count6 versions ( 23% of all versions)


Common Weakness Enumeration

CWE-440 Expected Behavior Violation



Details

  • Published - Mar 6, 2025
  • Updated - Mar 6, 2025

Credits

  • David Carlin (reporter)

Website Distribution by Country

Number of websites using CVE-2024-56202
United States11 websites


China121 websites
Germany119 websites
GB31 websites
Isle of Man8 websites
Finland5 websites
Italy4 websites
Japan2 websites
Russia2 websites

Website Distribution by TLD

Number of websites using CVE-2024-56202
.com.cn88 websites
.com38 websites
.cn23 websites
.org16 websites
.org.uk9 websites
.de9 websites
.fi7 websites
.it7 websites
.net5 websites
.ru2 websites

Vulnerable Versions

Vulnerable versions are highlighted in red

Websites affected by CVE-2024-56202

Top websites that are affected by CVE-2024-56202. Please click on the "Contact us" link to get more information.
DomainCountryRankContacts
****.******.jp Japan**,***
***.**********.de Germany**,***
*********.******.***.cn China**,***
******.**********.de Germany***,***
******.***.cn China***,***
*****.******.***.cn China***,***
***.***.**.uk GB***,***
****.******.***.cn China***,***
*****.****.******.community Germany***,***
*****.****.******.community Germany***,***
See full domain list

FAQ

CVE-2024-56202 is Expected Behavior Violation in ATS
A total of 308 websites have been identified as vulnerable to CVE-2024-56202, based on global website indexing conducted by WebTechSurvey.
The ATS is affected by the CVE-2024-56202 vulnerability.
ATS versions up to and including 10.0.3 are vulnerable to CVE-2024-56202.