Vulnerability in Squid-Cache Squid
CVE-2015-0881
CRLF injection vulnerability in Squid before 3.1.1 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via a crafted header in a response.
EPSS: 0.045 (90.5th percentile) — read the EPSS interpretation.
Affected products
- Squid-cache Squid
- N/a — versions n/a
References
- vultures@jpcert.or.jp (x_refsource_JVNDB, Vendor Advisory, third-party-advisory)
- vultures@jpcert.or.jp (x_refsource_JVN, Vendor Advisory, third-party-advisory)