References https://github.com/squid-cache/squid/security/advisories/GHSA-c8cc-phh7-xmxr https://nvd.nist.gov/vuln/detail/CVE-2025-62168 https://www.hkcert.org/tc/security-bulletin/squid-information-disclosure-vulnerability_20251020 https://cve.imfht.com/detail/CVE-2025-62168 https://www.tenablecloud.cn/plugins/nessus/272042 https://access.redhat.com/security/cve/cve-2025-62168 https://www.sentinelone.com/vulnerability-database/cve-2025-62168/ https://avd.aliyun.com/detail?id=AVD-2025-62168
Related VulnerabilitiesPoCCVE-2025-62168: Squid Proxy - HTTP Authentication Credentials DisclosurePoCCVE-2023-24278: Squidex <7.4.0 - Cross-Site ScriptingPoCsquid-analysis-report-generator: Squid Analysis Report GeneratorSquid Proxy HTTP Chunked 解码拒绝服务漏洞Squid Proxy HTTP Digest CVE-2023-46847 缓冲区溢出漏洞Squid Proxy CVE-2024-25617 拒绝服务漏洞Squid 代理 HTTP消息处理拒绝服务漏洞Squid 代理服务弱口令漏洞Squidex存在xss漏洞(CVE-2023-24278)MySQL Squid Access Report系统2.1.4-SQL注入