Description
An issue was discovered in Squid before 4.10. It allows a crafted FTP server to trigger disclosure of sensitive information from heap memory, such as information associated with other users' sessions or non-Squid processes.
Remediation
References
Related Vulnerabilities
WordPress 4.8.x Multiple Vulnerabilities (4.8 - 4.8.15)
ATutor Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2019-11446)
MySQL CVE-2021-35546 Vulnerability (CVE-2021-35546)
Atlassian Jira Authorization Bypass Through User-Controlled Key Vulnerability (CVE-2020-14174)
WebLogic Deserialization of Untrusted Data Vulnerability (CVE-2019-16942)