Description
Squid through 4.14 and 5.x through 5.0.5, in some configurations, allows information disclosure because of an out-of-bounds read in WCCP protocol data. This can be leveraged as part of a chain for remote code execution as nobody.
Remediation
References
Related Vulnerabilities
WordPress Plugin weForms-Easy Drag & Drop Contact Form Builder For WordPress CSV Injection (1.6.3)
WordPress Plugin ARMember-Content Restriction & Membership Security Bypass (1.4)
MediaWiki Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2022-29903)
Undertow Uncontrolled Resource Consumption Vulnerability (CVE-2022-2053)
CakePHP Permissions, Privileges, and Access Controls Vulnerability (CVE-2012-4399)