2 matches found
Internet Bug Bounty: URN Request bypass ACL Checks
Summary: Attacker can bypass ACL checks gaining access to restricted HTTP servers such as those running on localhost. Attacker could also gain access to CacheManager if VIA header is turned off. Only lines with : will be readable though, and the response must be less than 4096 bytes or it'll...
squid cachemanager DoS
cachemgr.cgi resources exhaustion...