Test ID:	1.3.6.1.4.1.25623.1.0.142629
Category:	Web Servers
Title:	Squid Security Update Advisory (SQUID-2018:4)
Summary:	Squid is prone to a cross-site scripting vulnerability to incorrect input; handling when generating HTTPS response messages about TLS errors.
Description:	Summary: Squid is prone to a cross-site scripting vulnerability to incorrect input handling when generating HTTPS response messages about TLS errors. Vulnerability Insight: This problem allows a malicious HTTPS server to trigger error page delivery to a client and also inject arbitrary HTML code into the resulting error response. This problem is limited to Squid built with TLS / SSL support. Affected Software/OS: Squid proxy versions 3.1.12.1 through 3.1.23, 3.2.0.4 through 3.5.28 and 4.x through 4.3. Solution: Update to version 4.4 or later. CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2018-19131 http://www.squid-cache.org/Advisories/SQUID-2018_4.txt http://www.squid-cache.org/Versions/v5/changesets/squid-5-6feeb15ff312f3e145763adf8d234ed6a0b3f11d.patch https://github.com/squid-cache/squid/pull/306
Copyright	Copyright (C) 2019 Greenbone Networks GmbH

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.