Lucene search

K
prionPRIOn knowledge basePRION:CVE-2022-41317
HistoryDec 25, 2022 - 7:15 p.m.

Cross site request forgery (csrf)

2022-12-2519:15:00
PRIOn knowledge base
www.prio-n.com
38
squid
internal uris
sensitive information
https
exposure

6.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

43.1%

An issue was discovered in Squid 4.9 through 4.17 and 5.0.6 through 5.6. Due to inconsistent handling of internal URIs, there can be Exposure of Sensitive Information about clients using the proxy via an HTTPS request to an internal cache manager URL. This is fixed in 5.7.

CPENameOperatorVersion
squidge4.9
squidle4.17
squidge5.0.6
squidlt5.7