Launchpad.net

CVE 2019-13345

The cachemgr.cgi web module of Squid through 4.7 has XSS via the user_name or auth parameter.

CVE-2019-13345 (Candidate) is related to these bugs:

Bug #1835831: FTBFS: gcc9 stringop-truncation and others

Summary				In	Importance	Status
	1835831	FTBFS: gcc9 stringop-truncation and others		squid (Ubuntu)	High	Fix Released
	1835831	FTBFS: gcc9 stringop-truncation and others		Squid	Unknown	Unknown

See the

CVE page on Mitre.org for more details.