Cross-Site Scripting (XSS)

squid is vulnerasble to cross-site scripting XSS. A remote attacker is able to inject and execute arbitrary Javascript in a user's browser via the username or auth parameter in cachemgr.cgi...

squid: XSS via user_name or auth parameter in cachemgr.cgi

The cachemgr.cgi web module of Squid through 4.7 has XSS via the username or auth parameter...

CVE-2019-18860

A flaw was found in squid. Squid, when certain web browsers are used, mishandles HTML in the host parameter to cachemgr.cgi which could result in squid behaving in unsecure way. Mitigation The cachemgr.cgi script is not used by default. If youve set this up manually and are worried about this...

Squid < 7.0.1 XSS Vulnerability (SQUID-2023:6)

Squid is prone to a cross-site scripting XSS vulnerability in cachemgr.cgi. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2019-18860

Squid before 4.9, when certain web browsers are used, mishandles HTML in the host aka hostname parameter to cachemgr.cgi...

DEBIAN-CVE-2019-18860

Squid before 4.9, when certain web browsers are used, mishandles HTML in the host aka hostname parameter to cachemgr.cgi...

CVE-2019-18860

CVE-2019-18860 affects Squid before 4.9; it mishandles HTML in the host (hostname) parameter to cachemgr.cgi when certain browsers are used. Root cause is improper parsing of that parameter, leading to insecure behavior. The vulnerability is addressed in Squid 4.9+ (upgrade suggested). Exploitati...

CVE-2019-18860

Squid before 4.9, when certain web browsers are used, mishandles HTML in the host aka hostname parameter to cachemgr.cgi...

Huawei EulerOS: Security Advisory for squid (EulerOS-SA-2019-2053)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS 2.0 SP2 : squid (EulerOS-SA-2019-2445)

According to the versions of the squid packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Squid before 4.4 has XSS via a crafted X.509 certificate during HTTPS error page generation for certificate errors.CVE-2018-19131 - Squid before...

RHEL 8 : squid:4 (RHSA-2019:3476)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2019:3476 advisory. Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data objects. Security Fixes: squid: XSS via...

squid: XSS via user_name or auth parameter in cachemgr.cgi

The cachemgr.cgi web module of Squid through 4.7 has XSS via the username or auth parameter...

OPENSUSE-SU-2019:1963-1 Security update for squid

This update for squid fixes the following issues: Security issue fixed: - CVE-2019-13345: Fixed a cross site scripting vulnerability via username or auth parameter in cachemgr.cgi bsc1140738. This update was imported from the SUSE:SLE-15:Update update project...

DEBIAN-CVE-2019-12854

Due to incorrect string termination, Squid cachemgr.cgi 4.0 through 4.7 may access unallocated memory. On systems with memory access protections, this can cause the CGI process to terminate unexpectedly, resulting in a denial of service for all clients using it...

CVE-2019-12854

Due to incorrect string termination, Squid cachemgr.cgi 4.0 through 4.7 may access unallocated memory. On systems with memory access protections, this can cause the CGI process to terminate unexpectedly, resulting in a denial of service for all clients using it...

CVE-2019-12854

Due to incorrect string termination, Squid cachemgr.cgi 4.0 through 4.7 may access unallocated memory. On systems with memory access protections, this can cause the CGI process to terminate unexpectedly, resulting in a denial of service for all clients using it...

Design/Logic Flaw

Due to incorrect string termination, Squid cachemgr.cgi 4.0 through 4.7 may access unallocated memory. On systems with memory access protections, this can cause the CGI process to terminate unexpectedly, resulting in a denial of service for all clients using it...

CVE-2019-12854

CVE-2019-12854 affects Squid up to 4.7, where incorrect string termination in cachemgr.cgi can cause access to unallocated memory and DoS for clients. Public advisories document this as a Denial of Service vector and list Squid 4.0–4.7 as affected; remediation seen in later vendor advisories/upda...

CVE-2019-12854

Due to incorrect string termination, Squid cachemgr.cgi 4.0 through 4.7 may access unallocated memory. On systems with memory access protections, this can cause the CGI process to terminate unexpectedly, resulting in a denial of service for all clients using it...

CVE-2019-12854

Due to incorrect string termination, Squid cachemgr.cgi 4.0 through 4.7 may access unallocated memory. On systems with memory access protections, this can cause the CGI process to terminate unexpectedly, resulting in a denial of service for all clients using it...