Описание
Squid before 4.4 has XSS via a crafted X.509 certificate during HTTP(S) error page generation for certificate errors.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| squid | fixed | 4.4-1 | package | |
| squid3 | removed | package |
Примечания
http://www.squid-cache.org/Advisories/SQUID-2018_4.txt
Squid in Debian builds without TLS support
EPSS
Процентиль: 90%
0.04108
Низкий
Связанные уязвимости
CVSS3: 6.1
ubuntu
почти 8 лет назад
Squid before 4.4 has XSS via a crafted X.509 certificate during HTTP(S) error page generation for certificate errors.
CVSS3: 5.6
redhat
почти 8 лет назад
Squid before 4.4 has XSS via a crafted X.509 certificate during HTTP(S) error page generation for certificate errors.
CVSS3: 6.1
nvd
почти 8 лет назад
Squid before 4.4 has XSS via a crafted X.509 certificate during HTTP(S) error page generation for certificate errors.
CVSS3: 6.1
github
больше 4 лет назад
Squid before 4.4 has XSS via a crafted X.509 certificate during HTTP(S) error page generation for certificate errors.
EPSS
Процентиль: 90%
0.04108
Низкий