Description: An authenticated Traffic Ops user with Portal-level privileges can send a request with a specially-crafted email subject to the /deliveryservices/request Traffic Ops endpoint to send an email, from the Traffic Ops server, with an arbitrary body to an arbitrary email address.
- CVE-2021-42009: Apache Traffic Control Arbitrary Email Cont... Eric Friedrich
- Re: CVE-2021-42009: Apache Traffic Control Arbitrary E... Eric Friedrich
