Description

Origin Validation Error, Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal'), Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Request/Response Splitting'), Uncontrolled Resource Consumption vulnerability in Apache Thrift. This issue affects Apache Thrift: before 0.23.0. Users are recommended to upgrade to version 0.23.0, which fixes the issue.

INFO

Published Date :

2026-05-05T07:45:35.699Z

Last Modified :

2026-05-05T08:49:35.528Z

Source :

apache
AFFECTED PRODUCTS

The following products are affected by CVE-2026-43870 vulnerability.

Vendors Products
Apache
  • Thrift
REFERENCES

Here, you will find a curated list of external links that provide in-depth information to CVE-2026-43870.

CVSS Vulnerability Scoring System