CVE-2019-13345

The cachemgr.cgi web module of Squid through 4.7 has XSS via the user_name or auth parameter

published July 5, 2019

Patch now

High probability of exploitation

NVD has not assigned a CVSS score to this record. It sits in the 99.5th percentile for exploit probability.

CVSS
—
EPSS
74%
Percentile
99.5
In the wild
Unconfirmed
What it is

The cachemgr.cgi web module of Squid through 4.7 has XSS via the user_name or auth parameter.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.74477 · 99.5th percentile
Published
2019-07-05T15:45Z
EPSS history
Timeline
  • 05 JUL 15:45Z
    The cachemgr.cgi web module of Squid through 4.7 has XSS via the user_name or auth parameter
    cvelistv5