Open Redirect in github.com/greenpau/caddy-security

中 6.1CVE-2024-21497 · GHSA-8hp3-rmr7-xh88 · GO-2024-2560 · 17/02/2024 公開 · 17/06/2026 更新

要点

CVE-2024-21497 は github.com/greenpau/caddy-security に影響する深刻度「中」 (CVSS 6.1) の脆弱性です。
今後30日間に悪用される確率（EPSS）：0.50%（全脆弱性の 43.0% より高い）。
修正版の情報はまだありません。参考情報のベンダー勧告を確認してください。

パッケージ	影響を受けるバージョン	修正済みバージョン
github.com/greenpau/caddy-security Go	`≤ 1.1.23全バージョン`	修正版なし

概要

All versions of the package github.com/greenpau/caddy-security are vulnerable to Open Redirect via the redirect_url parameter. An attacker could perform a phishing attack and trick users into visiting a malicious website by crafting a convincing URL with this parameter. To exploit this vulnerability, the user must take an action, such as clicking on a portal button or using the browser’s back button, to trigger the redirection.

NVD の説明

Versions of the package github.com/greenpau/caddy-security are vulnerable to Open Redirect via the redirect_url parameter. An attacker could perform a phishing attack and trick users into visiting a malicious website by crafting a convincing URL with this parameter. To exploit this vulnerability, the user must take an action, such as clicking on a portal button or using the browser’s back button, to trigger the redirection.