Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
Squid Vulnerability - CVE-2019-12523 - Vulnerability Database
Squid

Squid Vulnerability - CVE-2019-12523

Critical
Reference: CVE-2019-12523
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2019-12523
Title: Squid Vulnerability
Overview:

An issue was discovered in Squid before 4.9. When handling a URN request a corresponding HTTP request is made. This HTTP request doesn39t go through the access checks that incoming HTTP requests go through. This causes all access checks to be bypassed and allows access to restricted HTTP servers e.g. an attacker can connect to HTTP servers that only listen on localhost.