CVE-2020-25097

An issue was discovered in Squid through 4.13 and 5.x through 5.0.4

published March 19, 2021

CVSS
—
EPSS
7%
Percentile
94.4
In the wild
Unconfirmed
What it is

An issue was discovered in Squid through 4.13 and 5.x through 5.0.4. Due to improper input validation, it allows a trusted client to perform HTTP Request Smuggling and access services otherwise forbidden by the security controls. This occurs for certain uri_whitespace configuration settings.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.07343 · 94.4th percentile
Published
2021-03-19T04:08Z
EPSS history
Timeline
  • 19 MAR 04:08Z
    An issue was discovered in Squid through 4.13 and 5.x through 5.0.4
    cvelistv5