CVE:CVE-2020-25097
CNNVD:CNNVD-202103-1218
Squid是一套代理服务器和Web缓存服务器软件。该软件提供缓存万维网、过滤流量、代理上网等功能。
Squid through 4.13 and 5.x through 5.0.4 存在环境问题漏洞，该漏洞源于不正确的输入验证，它允许受信任的客户机执行HTTP请求走私，并访问安全控制部门禁止的服务。
solution:Upgrade squid-cache squid to a higher version than 4.14,5.0.5,and avoid the version [2.0,4.14),[5.0.1,5.0.5); Upgrade debian debian_linux to a higher version than 10.0,and avoid the version 10.0; Upgrade fedoraproject fedora to a higher version than 32,33,34,and avoid the version 32,33,34; Upgrade netapp cloud_manager to a higher version than -