CVE-2025-62168 PoC — Squid 安全漏洞

Source

Associated Vulnerability

Description

PoC of CVE-2025-62168

Readme

  # CVE-2025-62168<br>Squid Proxy Information Disclosure in Error handling

### Scanner (Detection & PoC)

![](https://github.com/monzaviman/CVE-2025-62168/blob/main/Banner.jpg)

"Due to a failure to redact HTTP Authentication credentials
Squid is vulnerable to an Information Disclosure attack.
Severity:

This problem allows a script to bypass Browser security
protections and learn the credentials a trusted client uses to
authenticate.

This problem potentially allows a remote client to identify
security tokens or credentials used internally by a web
application using Squid for backend load balancing.

These attacks do not require Squid to be configured with HTTP
Authentication."

#### How to Use
```
use virtual enviroment & active
pip install -r requirements.txt

python3 main.py
```
![](https://github.com/monzaviman/CVE-2025-62168/blob/main/PoC.png)

File Snapshot

 [4.0K]  /data/pocs/49e602f0c458c27bb5fa8506778c5977d681a04b
├── [408K]  Banner.jpg
├── [5.9K]  main.py
├── [ 55K]  PoC.png
├── [ 879]  README.md
└── [ 506]  requirements.txt

1 directory, 5 files

Remarks