Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:26840
HistorySep 21, 2020 - 6:21 a.m.

Arbitrary Code Execution

2020-09-2106:21:27
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
25

EPSS

0.011

Percentile

84.6%

squid3 is vulnerable to arbitrary code execution. The vulnerability exists as squid by default comes with rules to block access to the Cache Manager, which serves detailed server information meant for the maintainer, that allows encoded URLs to bypass the url_regex check.