The cachemgr.cgi web module of Squid through 4.7 has XSS via the user_name or auth parameter.
CVSS Details
- CVSS 3.1 Base Score: 6.1
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libecapUpgrade libecap-devel | May 4, 2022 | Jul 5, 2019 |
| Alpine Linux | — | Upgrade squid | Nov 8, 2019 | Jul 5, 2019 |
| Amazon Linux Ami 2 | — | Upgrade squid-sysvinitUpgrade squid-debuginfoUpgrade squidUpgrade squid-migration-script | Jul 2, 2020 | Jul 5, 2019 |
| Amazon_linux | — | Upgrade squid | Jul 18, 2020 | Jul 5, 2019 |
| Centos_linux | — | Upgrade libecap-debuginfoUpgrade squid-debugsourceUpgrade libecapUpgrade libecap-develUpgrade squidUpgrade libecap-debugsourceUpgrade squid-sysvinitUpgrade squid-migration-scriptUpgrade squid-debuginfo | Nov 6, 2019 | Jul 5, 2019 |
| Debian | — | Upgrade squid | Jul 9, 2019 | Jul 5, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade squid-migration-scriptUpgrade squid | Dec 4, 2019 | Jul 5, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade squid-migration-scriptUpgrade squid | Sep 25, 2019 | Jul 5, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade squid | Sep 30, 2019 | Jul 5, 2019 |
| Oracle Solaris | — | Upgrade web/proxy/squid to version 4.8-11.4.15.0.1.3.0 on Solaris 11.4 | Nov 20, 2019 | Jul 5, 2019 |
| Oracle_linux | — | Upgrade squidUpgrade libecap-develUpgrade squid-sysvinitUpgrade squid-migration-scriptUpgrade libecap | Oct 5, 2022 | Jul 5, 2019 |
| Redhat_linux | — | Upgrade squidUpgrade squid-migration-scriptUpgrade libecap-develUpgrade squid-debuginfoUpgrade libecap-debugsourceUpgrade libecap-debuginfoUpgrade squid-sysvinitUpgrade libecapNo solution existsUpgrade squid-debugsource | Nov 6, 2019 | Jul 5, 2019 |
| Rocky_linux | — | Upgrade libecapUpgrade libecap-develUpgrade libecap-debugsourceUpgrade libecap-debuginfo | Mar 12, 2024 | Jul 5, 2019 |
| Suse | — | Upgrade squid3Upgrade squid | Aug 9, 2019 | Jul 5, 2019 |
| Ubuntu | — | Upgrade squidUpgrade squid3 | Jul 16, 2019 | Jul 5, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub