Server-Side Request Forgery in github.com/greenpau/caddy-security

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2024-21498 · ADVISORY
• greenpau/caddy-security · WEB
• blog.trailofbits.com/2023/09/18/security-flaws-in-an-sso-plugin-for-caddy · WEB
• security.snyk.io/vuln/SNYK-GOLANG-GITHUBCOMGREENPAUCADDYSECURITY-6249862 · WEB
• github.com/greenpau/caddy-security · PACKAGE
• blog.trailofbits.com/2023/09/18/security-flaws-in-an-sso-plugin-for-caddy · Issue Tracking
• GitHub Advisory GHSA-93x8-66j2-wwr5 · ADVISORY

github.com/greenpau/caddy-security のその他の脆弱性

• CVE-2024-21500中 6.5All versions of the package github.com/greenpau/caddy-security are vulnerable to Improper Restriction of Excessive Authentication Attempts v…
• CVE-2024-21499中 4.3All versions of the package github.com/greenpau/caddy-security are vulnerable to HTTP Header Injection via the X-Forwarded-Proto header due …
• CVE-2024-21497中 6.1Versions of the package github.com/greenpau/caddy-security are vulnerable to Open Redirect via the redirect_url parameter. An attacker coul…
• CVE-2024-21496中 6.1All versions of the package github.com/greenpau/caddy-security are vulnerable to Cross-site Scripting (XSS) via the Referer header, due to i…
• CVE-2024-21495緊急 9.8Versions of the package github.com/greenpau/caddy-security before 1.0.42 are vulnerable to Insecure Randomness due to using an insecure rand…