UpHeron
All vulnerabilities

Servers and applications

CVE-2019-12520

An issue was discovered in Squid through 4.7 and 5. When receiving a request, Squid checks its cache to see if it can serve up a response. It does this by making a MD5 hash of the absolute URL of the request. If found, it servers the request. The absolute URL can include the decoded UserInfo (username and password) for certain protocols. This decoded info is prepended to the domain. This allows…

Severity
High 7.5
Published
15 Apr 2020
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Sources
NVD

Affected software

SoftwareAffected versions
SquidServers and applications · cpe:a:squid-cache:squid
  • Every version up to 4.7

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2019-12520
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2019-12520