Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2016-4553
5
MEDIUMCVSS v2
Published
May 10, 2016
Affected
5 projects
Assigned by
MITRE
Severity scale
010
Description
client_side.cc in Squid before 3.5.18 and 4.x before 4.0.10 does not properly ignore the Host header when absolute-URI is provided, which allows remote attackers to conduct cache-poisoning attacks via an HTTP request.
squid-cache/squid
GitHubSquid Web Proxy Cache - Source Code
GitHubSquid Web Proxy Cache - Source Code<= 3.5.17, = 4.0.5, = 4.0.3, = 4.0.1, = 4.0.8, = 4.0.2, = 4.0.7, = 4.0.4, = 4.0.6, = 4.0.9NVD
squid
NPMProvides SQL tagged template strings and a schema definition function.
NPMProvides SQL tagged template strings and a schema definition function.<= 3.5.17, = 4.0.5, = 4.0.3, = 4.0.1, = 4.0.8, = 4.0.2, = 4.0.7, = 4.0.4, = 4.0.6, = 4.0.9NVD
RubyGems