CVE-2019-18860

Squid before 4.9, when certain web browsers are used, mishandles HTML in the host (aka hostname) parameter to cachemgr.cgi

published March 20, 2020

CVSS
—
EPSS
6%
Percentile
92.8
In the wild
Unconfirmed
What it is

Squid before 4.9, when certain web browsers are used, mishandles HTML in the host (aka hostname) parameter to cachemgr.cgi.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.05500 · 92.8th percentile
Published
2020-03-20T20:32Z
EPSS history
Timeline
  • 20 MAR 20:32Z
    Squid before 4.9, when certain web browsers are used, mishandles HTML in the host (aka hostname) parameter to cachemgr.cgi
    cvelistv5