DEBIAN-CVE-2018-19131 — Vulnetix

DEBIAN-CVE-2018-19131 PUBLISHED CVSS 6.099999904632568 MEDIUM

Squid before 4.4 has XSS via a crafted X.509 certificate during HTTP(S) error page generation for certificate errors.

Risk Scores

CVSS 3.0

6.099999904632568

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Affected Products

Vendor	Product	Versions
Debian:13	squid	0, 0, 0
Debian:11	squid	0, 0, 0
Debian:12	squid	0, 0, 0
Debian:14	squid	0, 0, 0

Exploit Intelligence

Proof-of-Concept exploit of CVE-2018-19131: Squid Proxy XSS via X.509 Certificate (github-poc-repo)
Proof-of-Concept exploit of CVE-2018-19131: Squid Proxy XSS via X.509 Certificate (github-poc)

Timeline

Nov 9, 2018 CVE Published
Apr 28, 2026 CVE Updated

References

https://security-tracker.debian.org/tracker/CVE-2018-19131 advisory

Open in Interactive Console →

$ Console Community · 100/wk Open console ›