Information Exposure Vulnerability in Squid Proxy Server

CVE-2022-41317

What is CVE-2022-41317?

An issue was identified in versions 4.9 through 4.17 and 5.0.6 through 5.6 of the Squid Proxy Server, caused by inconsistent handling of internal URIs. This flaw can lead to the exposure of sensitive client information when an HTTPS request is made to an internal cache manager URL. The vulnerability has been addressed in Squid version 5.7, emphasizing the importance of upgrading to ensure the security of the proxy environment.

References