Squid
91 CVEs
product
Monthly
Squid 3.1.9 allows remote attackers to bypass the access configuration for the CONNECT method by providing an arbitrary allowed hostname in the Host HTTP header. Rated medium severity (CVSS 5.0), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
Privilege Escalation
Squid
NVD
CVSS 2.0
5.0
EPSS
2.1%
EPSS 2%
CVSS 5.0
MEDIUM
This Month
Squid 3.1.9 allows remote attackers to bypass the access configuration for the CONNECT method by providing an arbitrary allowed hostname in the Host HTTP header. Rated medium severity (CVSS 5.0), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
Privilege Escalation
Squid
NVD
Prev
Page 2 of 2