Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-96r9-hr2x-h9g7

Опубликовано: 17 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 7.5

Описание

Incorrect HTTP Request header comparison in Squid HTTP Proxy 3.5.0.1 through 3.5.22, and 4.0.1 through 4.0.16 results in Collapsed Forwarding feature mistakenly identifying some private responses as being suitable for delivery to multiple clients.

Incorrect HTTP Request header comparison in Squid HTTP Proxy 3.5.0.1 through 3.5.22, and 4.0.1 through 4.0.16 results in Collapsed Forwarding feature mistakenly identifying some private responses as being suitable for delivery to multiple clients.

EPSS

Процентиль: 92%
0.04772
Низкий

7.5 High

CVSS3

Дефекты

CWE-200
CWE-697

Связанные уязвимости

CVSS3: 7.5
ubuntu
почти 10 лет назад

Incorrect HTTP Request header comparison in Squid HTTP Proxy 3.5.0.1 through 3.5.22, and 4.0.1 through 4.0.16 results in Collapsed Forwarding feature mistakenly identifying some private responses as being suitable for delivery to multiple clients.

CVSS3: 3.7
redhat
почти 10 лет назад

Incorrect HTTP Request header comparison in Squid HTTP Proxy 3.5.0.1 through 3.5.22, and 4.0.1 through 4.0.16 results in Collapsed Forwarding feature mistakenly identifying some private responses as being suitable for delivery to multiple clients.

CVSS3: 7.5
nvd
почти 10 лет назад

Incorrect HTTP Request header comparison in Squid HTTP Proxy 3.5.0.1 through 3.5.22, and 4.0.1 through 4.0.16 results in Collapsed Forwarding feature mistakenly identifying some private responses as being suitable for delivery to multiple clients.

CVSS3: 7.5
debian
почти 10 лет назад

Incorrect HTTP Request header comparison in Squid HTTP Proxy 3.5.0.1 t ...

CVSS3: 7.5
altlinux
почти 10 лет назад

ALT-PU-2016-2464: package `squid` update to version 3.5.23-alt1

EPSS

Процентиль: 92%
0.04772
Низкий

7.5 High

CVSS3

Дефекты

CWE-200
CWE-697