Beveiligingsadvies

CVE-2016-4553

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2016-05-10 19:00:00
Laatst bijgewerkt 2024-08-06 00:32:25
Toegewezen door mitre
CVSS-score geen score
Status PUBLISHED

Beschrijving

client_side.cc in Squid before 3.5.18 and 4.x before 4.0.10 does not properly ignore the Host header when absolute-URI is provided, which allows remote attackers to conduct cache-poisoning attacks via an HTTP request.