Логотип exploitDog
bind:"BDU:2020-01858" OR bind:"CVE-2019-18677"
Консоль
Логотип exploitDog

exploitDog

bind:"BDU:2020-01858" OR bind:"CVE-2019-18677"

Количество 14

Количество 14

fstec логотип

BDU:2020-01858

больше 5 лет назад

Уязвимость параметра append_domain прокси-сервера Squid, связанная с подделкой межсайтовых запросов, позволяющая нарушителю получить доступ к конфиденциальным данным и нарушить их целостность

CVSS3: 6.1
EPSS: Низкий
ubuntu логотип

CVE-2019-18677

больше 5 лет назад

An issue was discovered in Squid 3.x and 4.x through 4.8 when the append_domain setting is used (because the appended characters do not properly interact with hostname length restrictions). Due to incorrect message processing, it can inappropriately redirect traffic to origins it should not be delivered to.

CVSS3: 6.1
EPSS: Низкий
redhat логотип

CVE-2019-18677

больше 5 лет назад

An issue was discovered in Squid 3.x and 4.x through 4.8 when the append_domain setting is used (because the appended characters do not properly interact with hostname length restrictions). Due to incorrect message processing, it can inappropriately redirect traffic to origins it should not be delivered to.

CVSS3: 7.4
EPSS: Низкий
nvd логотип

CVE-2019-18677

больше 5 лет назад

An issue was discovered in Squid 3.x and 4.x through 4.8 when the append_domain setting is used (because the appended characters do not properly interact with hostname length restrictions). Due to incorrect message processing, it can inappropriately redirect traffic to origins it should not be delivered to.

CVSS3: 6.1
EPSS: Низкий
debian логотип

CVE-2019-18677

больше 5 лет назад

An issue was discovered in Squid 3.x and 4.x through 4.8 when the appe ...

CVSS3: 6.1
EPSS: Низкий
github логотип

GHSA-mm65-p7g9-c5hr

около 3 лет назад

An issue was discovered in Squid 3.x and 4.x through 4.8 when the append_domain setting is used (because the appended characters do not properly interact with hostname length restrictions). Due to incorrect message processing, it can inappropriately redirect traffic to origins it should not be delivered to.

CVSS3: 6.1
EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2019:3067-1

больше 5 лет назад

Security update for squid

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2020:0661-1

больше 5 лет назад

Security update for squid

EPSS: Низкий
suse-cvrf логотип

openSUSE-SU-2019:2541-1

больше 5 лет назад

Security update for squid

EPSS: Низкий
suse-cvrf логотип

openSUSE-SU-2019:2540-1

больше 5 лет назад

Security update for squid

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2019:2975-1

больше 5 лет назад

Security update for squid

EPSS: Низкий
rocky логотип

RLSA-2020:4743

больше 4 лет назад

Moderate: squid:4 security, bug fix, and enhancement update

EPSS: Низкий
oracle-oval логотип

ELSA-2020-4743

больше 4 лет назад

ELSA-2020-4743: squid:4 security, bug fix, and enhancement update (MODERATE)

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2020:14460-1

почти 5 лет назад

Security update for squid3

EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
fstec логотип
BDU:2020-01858

Уязвимость параметра append_domain прокси-сервера Squid, связанная с подделкой межсайтовых запросов, позволяющая нарушителю получить доступ к конфиденциальным данным и нарушить их целостность

CVSS3: 6.1
5%
Низкий
больше 5 лет назад
ubuntu логотип
CVE-2019-18677

An issue was discovered in Squid 3.x and 4.x through 4.8 when the append_domain setting is used (because the appended characters do not properly interact with hostname length restrictions). Due to incorrect message processing, it can inappropriately redirect traffic to origins it should not be delivered to.

CVSS3: 6.1
5%
Низкий
больше 5 лет назад
redhat логотип
CVE-2019-18677

An issue was discovered in Squid 3.x and 4.x through 4.8 when the append_domain setting is used (because the appended characters do not properly interact with hostname length restrictions). Due to incorrect message processing, it can inappropriately redirect traffic to origins it should not be delivered to.

CVSS3: 7.4
5%
Низкий
больше 5 лет назад
nvd логотип
CVE-2019-18677

An issue was discovered in Squid 3.x and 4.x through 4.8 when the append_domain setting is used (because the appended characters do not properly interact with hostname length restrictions). Due to incorrect message processing, it can inappropriately redirect traffic to origins it should not be delivered to.

CVSS3: 6.1
5%
Низкий
больше 5 лет назад
debian логотип
CVE-2019-18677

An issue was discovered in Squid 3.x and 4.x through 4.8 when the appe ...

CVSS3: 6.1
5%
Низкий
больше 5 лет назад
github логотип
GHSA-mm65-p7g9-c5hr

An issue was discovered in Squid 3.x and 4.x through 4.8 when the append_domain setting is used (because the appended characters do not properly interact with hostname length restrictions). Due to incorrect message processing, it can inappropriately redirect traffic to origins it should not be delivered to.

CVSS3: 6.1
5%
Низкий
около 3 лет назад
suse-cvrf логотип
SUSE-SU-2019:3067-1

Security update for squid

больше 5 лет назад
suse-cvrf логотип
SUSE-SU-2020:0661-1

Security update for squid

больше 5 лет назад
suse-cvrf логотип
openSUSE-SU-2019:2541-1

Security update for squid

больше 5 лет назад
suse-cvrf логотип
openSUSE-SU-2019:2540-1

Security update for squid

больше 5 лет назад
suse-cvrf логотип
SUSE-SU-2019:2975-1

Security update for squid

больше 5 лет назад
rocky логотип
RLSA-2020:4743

Moderate: squid:4 security, bug fix, and enhancement update

больше 4 лет назад
oracle-oval логотип
ELSA-2020-4743

ELSA-2020-4743: squid:4 security, bug fix, and enhancement update (MODERATE)

больше 4 лет назад
suse-cvrf логотип
SUSE-SU-2020:14460-1

Security update for squid3

почти 5 лет назад

Уязвимостей на страницу