CVE-2018-19131

Description

Squid before 4.4 has XSS via a crafted X.509 certificate during HTTP(S) error page generation for certificate errors.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

References

• http://www.squid-cache.org/Versions/v5/changesets/squid-5-6feeb15ff312f3e145763adf8d234ed6a0b3f11d.patch ↗
• http://www.squid-cache.org/Advisories/SQUID-2018_4.txt ↗
• https://github.com/squid-cache/squid/pull/306 ↗