CVE-2025-62168

The repository contains a scanner for detecting CVE-2025-62168, an information disclosure vulnerability in Squid Proxy. It checks for the presence of HTTP Authentication credentials in error responses and determines if the target Squid Proxy version is vulnerable.

The repository contains a Python script that scans for CVE-2025-62168, an information disclosure vulnerability in Squid Proxy due to improper redaction of HTTP Authentication credentials. The script checks the Squid version and attempts to detect the vulnerability by analyzing the error page response.

The repository contains a scanner for detecting CVE-2025-62168, an information disclosure vulnerability in Squid Proxy. It checks for the presence of HTTP Authentication credentials in error responses and verifies if the Squid version is vulnerable.

This repository contains a functional PoC for CVE-2025-62168, an information disclosure vulnerability in Squid Proxy where sensitive HTTP headers (e.g., JWT tokens) are reflected in error pages via the mailto diagnostic block. The PoC demonstrates token leakage by forcing a Squid error and parsing the response.