CVE-2025-62168 PoC — Squid vulnerable to information disclosure via authentication credential leakage in error handling

Description

PoC of CVE-2025-62168

Readme

  # CVE-2025-62168<br>Squid Proxy Information Disclosure in Error handling

### Scanner (Detection & PoC)

![](https://github.com/monzaviman/CVE-2025-62168/blob/main/Banner.jpg)

"Due to a failure to redact HTTP Authentication credentials
Squid is vulnerable to an Information Disclosure attack.
Severity:

This problem allows a script to bypass Browser security
protections and learn the credentials a trusted client uses to
authenticate.

This problem potentially allows a remote client to identify
security tokens or credentials used internally by a web
application using Squid for backend load balancing.

These attacks do not require Squid to be configured with HTTP
Authentication."

#### How to Use
```
use virtual enviroment & active
pip install -r requirements.txt

python3 main.py
```
![](https://github.com/monzaviman/CVE-2025-62168/blob/main/PoC.png)

File Snapshot

Remarks