Red Hat Security AdvisoryRHSA-2019:3476
squid:4 security and bug fix update
Released 2019-11-05 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 8) libecap-1.0.1-2.module+el8.1.0+4044+36416a77.aarch64::squid:4, libecap-1.0.1-2.module+el8.1.0+4044+36416a77.ppc64le::squid:4, libecap-1.0.1-2.module+el8.1.0+4044+36416a77.s390x::squid:4 +11
Fixes 1 record
Priority HIGH 66
The cachemgr.cgi web module of Squid through 4.7 has XSS via the user_name or auth parameter.
CVSS 3.0MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.74477 · Published 2019-07-05 · Partial fix CWE-79
