CVE-2026-52844

Опубликовано: 23 июн. 2026

Источник: nvd

CVSS3: 7.5

EPSS Низкий

Описание

Caddy is an extensible server platform that uses TLS by default. Prior to 2.11.4, on Windows, Caddy path matchers treat /private\secret.txt as outside /private/, but file_server later resolves the same request path as private\secret.txt on disk. An unauthenticated remote client can bypass Caddy path-scoped auth/deny routes protecting /private/. This vulnerability is fixed in 2.11.4.

Ссылки

https://github.com/caddyserver/caddy/security/advisories/GHSA-qrp7-cvwr-j2c6
Third Party Advisory
Exploit
https://github.com/caddyserver/caddy/security/advisories/GHSA-qrp7-cvwr-j2c6
Third Party Advisory
Exploit

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*

Версия до 2.11.4 (исключая)

cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*

EPSS

Процентиль: 39%

0.00478

Низкий

7.5 High

CVSS3

Дефекты

CWE-22

Связанные уязвимости

CVE-2026-52844

CVSS3: 7.5

ubuntu

около 2 месяцев назад

Caddy is an extensible server platform that uses TLS by default. Prior to 2.11.4, on Windows, Caddy path matchers treat /private\secret.txt as outside /private/*, but file_server later resolves the same request path as private\secret.txt on disk. An unauthenticated remote client can bypass Caddy path-scoped auth/deny routes protecting /private/*. This vulnerability is fixed in 2.11.4.

CVE-2026-52844

CVSS3: 7.5

debian

около 2 месяцев назад

Caddy is an extensible server platform that uses TLS by default. Prior ...

GHSA-qrp7-cvwr-j2c6

CVSS3: 7.5

github

около 2 месяцев назад

Caddy: Windows `file_server` path authorization bypass via encoded backslash

EPSS

Процентиль: 39%

0.00478

Низкий

7.5 High

CVSS3

Дефекты

CWE-22