Servers and applications
CVE-2019-12528
An issue was discovered in Squid before 4.10. It allows a crafted FTP server to trigger disclosure of sensitive information from heap memory, such as information associated with other users' sessions or non-Squid processes.
- Severity
- High 7.5
- Published
- 4 Feb 2020
- Last changed
- 17 Jun 2026
- Added to UpHeron
- 1 Nov 2026
- Fixed in
- 4.10
- Sources
- NVD
Affected software
| Software | Affected versions |
|---|---|
SquidServers and applications · cpe:a:squid-cache:squid |
|