CVE-2016-10003

—

CVSS 3.1

7.5 high

EPSS

5%p91

Published

Jan 27, 2017 (Jan 27, 2017)

Modified

Jun 17, 2026

Description

Incorrect HTTP Request header comparison in Squid HTTP Proxy 3.5.0.1 through 3.5.22, and 4.0.1 through 4.0.16 results in Collapsed Forwarding feature mistakenly identifying some private responses as being suitable for delivery to multiple clients.

Vendors: squid-cache
Products: squid
Weakness: CWE-697
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (4.8%)

In the news0 stories

No ingested article mentions this CVE yet.