All vulnerabilities

Servers and applications

CVE-2019-13345

The cachemgr.cgi web module of Squid through 4.7 has XSS via the user_name or auth parameter.

Severity
Medium 6.1
Published
5 Jul 2019
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Exploit chance
74% in the next 30 daysHigher than 99% of CVEs. EPSS by FIRST, 10 Nov 2026
Sources
NVD

Affected software

SoftwareAffected versions
SquidServers and applications · cpe:a:squid-cache:squid
  • Every version up to 4.7

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2019-13345
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2019-13345