Unrated
Squid before 4.4 has XSS via a crafted X.509 certificate during HTTP(S) error page generation for certificate errors.
CVE-2018-19131
First seen on SecPulse
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Debian DEBIAN-CVE-2018-19131 squid Fixed in: 4.4-1
References
- advisory squid-cache.org
- advisory github.com
- patch squid-cache.org