CVE-2019-18860

—

CVSS 3.1

6.1 medium

EPSS

6%p92

Published

Mar 20, 2020 (Mar 20, 2020)

Modified

Jun 17, 2026

Description

Squid before 4.9, when certain web browsers are used, mishandles HTML in the host (aka hostname) parameter to cachemgr.cgi.

Vendors: squid-cache debian canonical opensuse
Products: squid, debian linux, ubuntu linux, leap
Weakness: CWE-74
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (5.5%)

In the news0 stories

No ingested article mentions this CVE yet.