Description
An issue was discovered in Squid before 4.10. It allows a crafted FTP server to trigger disclosure of sensitive information from heap memory, such as information associated with other users' sessions or non-Squid processes.
Remediation
References
Related Vulnerabilities
WordPress Plugin Fudousan Cross-Site Scripting (5.7.0)
Apache HTTP Server Use of Incorrectly-Resolved Name or Reference Vulnerability (CVE-2019-0220)
Craft CMS Files or Directories Accessible to External Parties Vulnerability (CVE-2024-52292)
Jenkins Observable Discrepancy Vulnerability (CVE-2022-34174)
Restlet Framework Deserialization of Untrusted Data Vulnerability (CVE-2013-4271)