Alpine/squid: medium 6.1

The cachemgr.cgi web module of Squid through 4.7 has XSS via the user_name or auth parameter.

Action: Upgrade squid to 3.5.27-r1 or later.

Affected

Fixed versions

Sources

• osv: ALPINE-CVE-2019-13345#Alpine:v3.7/squid
• https://security.alpinelinux.org/vuln/CVE-2019-13345

published 2019-07-05T16:15:11.747Z · modified 2026-09-21T06:17:52.479078785Z · JSON