Security Advisory

CVE-2016-4554

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2016-05-10 19:00:00
Last updated 2024-08-06 00:32:25
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

mime_header.cc in Squid before 3.5.18 allows remote attackers to bypass intended same-origin restrictions and possibly conduct cache-poisoning attacks via a crafted HTTP Host header, aka a "header smuggling" issue.