https://seclists.org/oss-sec/2025/q4/133: [CVE-2019-18860] SQUID-2023:6 Cross Site Scripting in cachemgr.cgi
Published Nov 4, 2025
·Updated
Affected Software
5 affected components
Squid Squid Proxy Cache<2.7.STABLE9
Squid Squid Proxy Cache<3.5.28
Squid Squid Proxy Cache<4.17
Squid Squid Proxy Cache<5.9
Squid Squid Proxy Cache<6.14
Frequently Asked Questions
1
What is the severity of CVE-2019-18860?
CVE-2019-18860 has been classified as a high severity vulnerability due to its potential exploitation in Cross-Site Scripting attacks.
2
How do I fix CVE-2019-18860?
To fix CVE-2019-18860, you should upgrade to the latest version of Squid Proxy Cache that addresses this vulnerability.
3
What systems are affected by CVE-2019-18860?
CVE-2019-18860 affects certain versions of the Squid Proxy Cache software that utilize the cachemgr.cgi component.
4
What are the risks of not addressing CVE-2019-18860?
If left unaddressed, CVE-2019-18860 can allow attackers to execute malicious scripts in the context of a user's session, compromising sensitive information.
5
Is there a workaround for CVE-2019-18860?
Currently, the recommended action for CVE-2019-18860 is to apply the available patch or upgrade, as no effective workaround is specified.