CVE-2022-28923

Опубликовано: 06 фев. 2023

Источник: nvd

CVSS3: 6.1

EPSS Низкий

Описание

Caddy v2.4.6 was discovered to contain an open redirection vulnerability which allows attackers to redirect users to phishing websites via crafted URLs.

Ссылки

https://lednerb.de/en/publications/responsible-disclosure/caddy-open-redirect-vulnerability/
Exploit
Patch
Third Party Advisory
https://lednerb.de/en/publications/responsible-disclosure/caddy-open-redirect-vulnerability/
Exploit
Patch
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:caddyserver:caddy:2.4.6:*:*:*:*:*:*:*

EPSS

Процентиль: 71%

0.01431

Низкий

6.1 Medium

CVSS3

Дефекты

CWE-601

Связанные уязвимости

CVE-2022-28923

CVSS3: 6.1

ubuntu

больше 3 лет назад

Caddy v2.4.6 was discovered to contain an open redirection vulnerability which allows attackers to redirect users to phishing websites via crafted URLs.

CVE-2022-28923

CVSS3: 7.5

redhat

больше 3 лет назад

Caddy v2.4.6 was discovered to contain an open redirection vulnerability which allows attackers to redirect users to phishing websites via crafted URLs.

CVE-2022-28923

CVSS3: 6.1

debian

больше 3 лет назад

Caddy v2.4.6 was discovered to contain an open redirection vulnerabili ...

GHSA-qpm3-vr34-h8w8

CVSS3: 6.1

github

больше 3 лет назад

Open Redirect in Caddy

EPSS

Процентиль: 71%

0.01431

Низкий

6.1 Medium

CVSS3

Дефекты

CWE-601