Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
Squid Improper Input Validation Vulnerability - CVE-2020-25097 - Vulnerability Database
Squid

Squid Improper Input Validation Vulnerability - CVE-2020-25097

High
Reference: CVE-2020-25097
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2020-25097
Title: Squid Improper Input Validation Vulnerability
Overview:

An issue was discovered in Squid through 4.13 and 5.x through 5.0.4. Due to improper input validation it allows a trusted client to perform HTTP Request Smuggling and access services otherwise forbidden by the security controls. This occurs for certain uri_whitespace configuration settings.