The cachemgr.cgi web module of Squid through 4.7 has XSS via the user_name or auth parameter.
CVSS Details
- CVSS 3.1 Base Score: 6.1
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libecap-develUpgrade libecap | May 4, 2022 | Jul 5, 2019 |
| Alpine Linux | — | Upgrade squid | Nov 8, 2019 | Jul 5, 2019 |
| Amazon Linux Ami 2 | — | Upgrade squid-migration-scriptUpgrade squid-debuginfoUpgrade squid-sysvinitUpgrade squid | Jul 2, 2020 | Jul 5, 2019 |
| Amazon_linux | — | Upgrade squid | Jul 18, 2020 | Jul 5, 2019 |
| Centos_linux | — | Upgrade libecap-develUpgrade squid-migration-scriptUpgrade libecap-debugsourceUpgrade squidUpgrade squid-debuginfoUpgrade squid-sysvinitUpgrade libecap-debuginfoUpgrade libecapUpgrade squid-debugsource | Nov 6, 2019 | Jul 5, 2019 |
| Debian | — | Upgrade squid | Jul 9, 2019 | Jul 5, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade squidUpgrade squid-migration-script | Dec 4, 2019 | Jul 5, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade squid-migration-scriptUpgrade squid | Sep 25, 2019 | Jul 5, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade squid | Sep 30, 2019 | Jul 5, 2019 |
| Oracle Solaris | — | Upgrade web/proxy/squid to version 4.8-11.4.15.0.1.3.0 on Solaris 11.4 | Nov 20, 2019 | Jul 5, 2019 |
| Oracle_linux | — | Upgrade squid-migration-scriptUpgrade libecap-develUpgrade squid-sysvinitUpgrade squidUpgrade libecap | Oct 5, 2022 | Jul 5, 2019 |
| Redhat_linux | — | No solution existsUpgrade libecapUpgrade squid-debugsourceUpgrade libecap-debuginfoUpgrade squid-sysvinitUpgrade squid-debuginfoUpgrade libecap-develUpgrade libecap-debugsourceUpgrade squidUpgrade squid-migration-script | Nov 6, 2019 | Jul 5, 2019 |
| Rocky_linux | — | Upgrade libecap-develUpgrade libecap-debugsourceUpgrade libecap-debuginfoUpgrade libecap | Mar 12, 2024 | Jul 5, 2019 |
| Suse | — | Upgrade squidUpgrade squid3 | Aug 9, 2019 | Jul 5, 2019 |
| Ubuntu | — | Upgrade squid3Upgrade squid | Jul 16, 2019 | Jul 5, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub