In short
- CVE-2024-21498 is a MEDIUM (CVSS 5.3) vulnerability affecting github.com/greenpau/caddy-security.
- Chance of exploitation in the next 30 days (EPSS): 0.55%, higher than 46.5% of all vulnerabilities.
- No patched version is listed yet: follow the vendor's advisory in References.
Description
All versions of the package github.com/greenpau/caddy-security are vulnerable to Server-side Request Forgery (SSRF) via X-Forwarded-Host header manipulation. An attacker can expose sensitive information, interact with internal services, or exploit other vulnerabilities within the network by exploiting this vulnerability.
NVD description
All versions of the package github.com/greenpau/caddy-security are vulnerable to Server-side Request Forgery (SSRF) via X-Forwarded-Host header manipulation. An attacker can expose sensitive information, interact with internal services, or exploit other vulnerabilities within the network by exploiting this vulnerability.
More vulnerabilities in github.com/greenpau/caddy-security
See all →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free