CVE-2018-19131

Squid before 4.4 has XSS via a crafted X.509 certificate during HTTP(S) error page generation for certificate errors

published November 9, 2018

CVSS
—
EPSS
3%
Percentile
88.5
In the wild
Unconfirmed
What it is

Squid before 4.4 has XSS via a crafted X.509 certificate during HTTP(S) error page generation for certificate errors.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03318 · 88.5th percentile
Published
2018-11-09T11:00Z
EPSS history
Timeline
  • 09 NOV 11:00Z
    Squid before 4.4 has XSS via a crafted X.509 certificate during HTTP(S) error page generation for certificate errors
    cvelistv5