CVE-2022-28923

Опубликовано: 06 фев. 2023

Источник: debian

EPSS Низкий

Описание

Caddy v2.4.6 was discovered to contain an open redirection vulnerability which allows attackers to redirect users to phishing websites via crafted URLs.

Пакеты

Пакет	Статус	Версия исправления	Релиз	Тип
caddy	fixed	2.5.2-1		package

Примечания

https://lednerb.de/en/publications/responsible-disclosure/caddy-open-redirect-vulnerability/
https://github.com/caddyserver/caddy/commit/78b5356f2b1945a90de1ef7f2c7669d82098edbd (v2.5.0-beta.1)

EPSS

Процентиль: 73%

0.01431

Низкий

Связанные уязвимости

CVE-2022-28923

CVSS3: 6.1

ubuntu

почти 4 года назад

Caddy v2.4.6 was discovered to contain an open redirection vulnerability which allows attackers to redirect users to phishing websites via crafted URLs.

CVE-2022-28923

CVSS3: 7.5

redhat

почти 4 года назад

Caddy v2.4.6 was discovered to contain an open redirection vulnerability which allows attackers to redirect users to phishing websites via crafted URLs.

CVE-2022-28923

CVSS3: 6.1

nvd

почти 4 года назад

Caddy v2.4.6 was discovered to contain an open redirection vulnerability which allows attackers to redirect users to phishing websites via crafted URLs.

GHSA-qpm3-vr34-h8w8

CVSS3: 6.1

github

почти 4 года назад

Open Redirect in Caddy

ALT-PU-2022-1850

CVSS3: 6.1

altlinux

больше 4 лет назад

ALT-PU-2022-1850: package `caddy` update to version 2.5.1-alt1

EPSS

Процентиль: 73%

0.01431

Низкий