The "%xx" URL decoding function in Squid 2.5STABLE4 and earlier allows remote attackers to bypass url_regex ACLs via a URL with a NULL ("%00") character, which causes Squid to use only a portion of the requested URL when comparing it against the access control lists.

Threat-Mapped Scoring

Score: 0.0

Priority: Unclassified

EPSS

Score: 0.05083
Percentile: 0.89348

CVSS Scoring

Affected Products

• cpe:2.3:a:squid:squid:2.0_patch2:*:*:*:*:*:*:*
• cpe:2.3:a:squid:squid:2.1_patch2:*:*:*:*:*:*:*
• cpe:2.3:a:squid:squid:2.3_stable5:*:*:*:*:*:*:*
• cpe:2.3:a:squid:squid:2.4:*:*:*:*:*:*:*
• cpe:2.3:a:squid:squid:2.4_stable7:*:*:*:*:*:*:*
• cpe:2.3:a:squid:squid:2.5_stable3:*:*:*:*:*:*:*
• cpe:2.3:a:squid:squid:2.5_stable4:*:*:*:*:*:*:*

← Back to Home