CVE-2022-28923

Опубликовано: 06 фев. 2023

Источник: nvd

CVSS3: 6.1

EPSS Низкий

Описание

Caddy v2.4.6 was discovered to contain an open redirection vulnerability which allows attackers to redirect users to phishing websites via crafted URLs.

Ссылки

https://lednerb.de/en/publications/responsible-disclosure/caddy-open-redirect-vulnerability/
Exploit
Patch
Third Party Advisory
https://lednerb.de/en/publications/responsible-disclosure/caddy-open-redirect-vulnerability/
Exploit
Patch
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:caddyserver:caddy:2.4.6:*:*:*:*:*:*:*

EPSS

Процентиль: 73%

0.01431

Низкий

6.1 Medium

CVSS3

Дефекты

CWE-601

Связанные уязвимости

CVE-2022-28923

CVSS3: 6.1

ubuntu

почти 4 года назад

Caddy v2.4.6 was discovered to contain an open redirection vulnerability which allows attackers to redirect users to phishing websites via crafted URLs.

CVE-2022-28923

CVSS3: 7.5

redhat

почти 4 года назад

Caddy v2.4.6 was discovered to contain an open redirection vulnerability which allows attackers to redirect users to phishing websites via crafted URLs.

CVE-2022-28923

CVSS3: 6.1

debian

почти 4 года назад

Caddy v2.4.6 was discovered to contain an open redirection vulnerabili ...

GHSA-qpm3-vr34-h8w8

CVSS3: 6.1

github

почти 4 года назад

Open Redirect in Caddy

ALT-PU-2022-1850

CVSS3: 6.1

altlinux

больше 4 лет назад

ALT-PU-2022-1850: package `caddy` update to version 2.5.1-alt1

EPSS

Процентиль: 73%

0.01431

Низкий

6.1 Medium

CVSS3

Дефекты

CWE-601