The cachemgr.cgi web module of Squid through 4.7 has XSS via the user_name or auth parameter.
CVSS Details
- CVSS 3.1 Base Score: 6.1
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libecap-develUpgrade libecap | May 4, 2022 | Jul 5, 2019 |
| Alpine Linux | — | Upgrade squid | Nov 8, 2019 | Jul 5, 2019 |
| Amazon Linux Ami 2 | — | Upgrade squid-sysvinitUpgrade squidUpgrade squid-debuginfoUpgrade squid-migration-script | Jul 2, 2020 | Jul 5, 2019 |
| Amazon_linux | — | Upgrade squid | Jul 18, 2020 | Jul 5, 2019 |
| Centos_linux | — | Upgrade libecap-develUpgrade squid-migration-scriptUpgrade squidUpgrade squid-sysvinitUpgrade libecap-debugsourceUpgrade squid-debuginfoUpgrade libecapUpgrade libecap-debuginfoUpgrade squid-debugsource | Nov 6, 2019 | Jul 5, 2019 |
| Debian | — | Upgrade squid | Jul 9, 2019 | Jul 5, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade squidUpgrade squid-migration-script | Dec 4, 2019 | Jul 5, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade squidUpgrade squid-migration-script | Sep 25, 2019 | Jul 5, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade squid | Sep 30, 2019 | Jul 5, 2019 |
| Oracle Solaris | — | Upgrade web/proxy/squid to version 4.8-11.4.15.0.1.3.0 on Solaris 11.4 | Nov 20, 2019 | Jul 5, 2019 |
| Oracle_linux | — | Upgrade libecap-develUpgrade squidUpgrade squid-sysvinitUpgrade squid-migration-scriptUpgrade libecap | Oct 5, 2022 | Jul 5, 2019 |
| Redhat_linux | — | Upgrade libecapUpgrade squid-debugsourceNo solution existsUpgrade squid-debuginfoUpgrade squid-migration-scriptUpgrade libecap-develUpgrade squid-sysvinitUpgrade squidUpgrade libecap-debugsourceUpgrade libecap-debuginfo | Nov 6, 2019 | Jul 5, 2019 |
| Rocky_linux | — | Upgrade libecapUpgrade libecap-develUpgrade libecap-debuginfoUpgrade libecap-debugsource | Mar 12, 2024 | Jul 5, 2019 |
| Suse | — | Upgrade squid3Upgrade squid | Aug 9, 2019 | Jul 5, 2019 |
| Ubuntu | — | Upgrade squidUpgrade squid3 | Jul 16, 2019 | Jul 5, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub