vulnerability

Oracle Linux: CVE-2019-13345: ELSA-2020-1068: squid security and bug fix update (MODERATE) (Multiple Advisories)

Severity
4
CVSS
(AV:N/AC:L/Au:S/C:N/I:P/A:N)
Published
2019-07-05
Added
2022-10-05
Modified
2025-01-08

Description

The cachemgr.cgi web module of Squid through 4.7 has XSS via the user_name or auth parameter.

Solution(s)

oracle-linux-upgrade-libecaporacle-linux-upgrade-libecap-develoracle-linux-upgrade-squidoracle-linux-upgrade-squid-migration-scriptoracle-linux-upgrade-squid-sysvinit
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.