Описание
Caddy v2.4 was discovered to contain an open redirect vulnerability. A remote unauthenticated attacker may exploit this vulnerability to redirect users to arbitrary web URLs by tricking the victim users to click on crafted links.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| caddy | not-affected | package |
Примечания
https://github.com/caddyserver/caddy/pull/4499
https://github.com/caddyserver/caddy/commit/3fe2c73dd04f7769a9d9673236cb94b79ac45659 (v2.5.0-beta.1)
EPSS
Процентиль: 65%
0.01076
Низкий
Связанные уязвимости
CVSS3: 6.1
nvd
больше 4 лет назад
Caddy v2.4 was discovered to contain an open redirect vulnerability. A remote unauthenticated attacker may exploit this vulnerability to redirect users to arbitrary web URLs by tricking the victim users to click on crafted links.
CVSS3: 6.1
altlinux
больше 4 лет назад
ALT-PU-2022-1850: package `caddy` update to version 2.5.1-alt1
EPSS
Процентиль: 65%
0.01076
Низкий