Описание
Caddy v2.4.6 was discovered to contain an open redirection vulnerability which allows attackers to redirect users to phishing websites via crafted URLs.
An open redirect flaw was found in caddy. This issue may allow a malicious user to craft a link that redirects to any url they choose.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Migration Toolkit for Containers | rhmtc/openshift-migration-velero-plugin-for-gcp-rhel8 | Not affected | ||
| Migration Toolkit for Containers | rhmtc/openshift-migration-velero-plugin-for-microsoft-azure-rhel8 | Not affected | ||
| Migration Toolkit for Containers | rhmtc/openshift-migration-velero-restic-restore-helper-rhel8 | Not affected | ||
| Migration Toolkit for Containers | rhmtc/openshift-migration-velero-rhel8 | Not affected | ||
| OpenShift API for Data Protection | oadp/oadp-velero-plugin-for-aws-rhel8 | Not affected | ||
| OpenShift API for Data Protection | oadp/oadp-velero-plugin-for-gcp-rhel9 | Not affected | ||
| OpenShift API for Data Protection | oadp/oadp-velero-plugin-for-microsoft-azure-rhel8 | Not affected | ||
| OpenShift API for Data Protection | oadp/oadp-velero-restic-restore-helper-rhel8 | Not affected | ||
| OpenShift API for Data Protection | oadp/oadp-velero-rhel8 | Not affected | ||
| Red Hat Advanced Cluster Management for Kubernetes 2 | acm-multicluster-globalhub-agent-container | Not affected |
Показывать по
Дополнительная информация
Статус:
EPSS
7.5 High
CVSS3
Связанные уязвимости
Caddy v2.4.6 was discovered to contain an open redirection vulnerability which allows attackers to redirect users to phishing websites via crafted URLs.
Caddy v2.4.6 was discovered to contain an open redirection vulnerability which allows attackers to redirect users to phishing websites via crafted URLs.
Caddy v2.4.6 was discovered to contain an open redirection vulnerabili ...
ALT-PU-2022-1850: package `caddy` update to version 2.5.1-alt1
EPSS
7.5 High
CVSS3