Description

An issue was discovered in Squid before 4.10. Due to incorrect input validation, it can interpret crafted HTTP requests in unexpected ways to access server resources prohibited by earlier security filters.

Remediation

References

CVE-2020-8449

Related Vulnerabilities

WordPress Plugin Easy Accept Payments for PayPal Cross-Site Scripting (4.9.9)

Apache HTTP Server Heap-based Buffer Overflow Vulnerability (CVE-2026-34355)

Liferay DXP Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2024-25601)

Envoy Proxy CVE-2023-27488 Vulnerability (CVE-2023-27488)

Oracle JRE CVE-2019-2987 Vulnerability (CVE-2019-2987)

Severity

High

Classification

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Tags

Missing Update Known Vulnerabilities CWE-668 CVE-2020-8449