Improper Neutralization of HTTP Headers in github.com/greenpau/caddy-security

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2024-21499 · ADVISORY
• greenpau/caddy-security · WEB
• blog.trailofbits.com/2023/09/18/security-flaws-in-an-sso-plugin-for-caddy · WEB
• security.snyk.io/vuln/SNYK-GOLANG-GITHUBCOMGREENPAUCADDYSECURITY-6249863 · WEB
• github.com/greenpau/caddy-security · PACKAGE
• blog.trailofbits.com/2023/09/18/security-flaws-in-an-sso-plugin-for-caddy · Third Party Advisory
• GitHub Advisory GHSA-r969-783f-6jqr · ADVISORY

github.com/greenpau/caddy-security のその他の脆弱性

• CVE-2024-21500中 6.5All versions of the package github.com/greenpau/caddy-security are vulnerable to Improper Restriction of Excessive Authentication Attempts v…
• CVE-2024-21498中 5.3All versions of the package github.com/greenpau/caddy-security are vulnerable to Server-side Request Forgery (SSRF) via X-Forwarded-Host hea…
• CVE-2024-21497中 6.1Versions of the package github.com/greenpau/caddy-security are vulnerable to Open Redirect via the redirect_url parameter. An attacker coul…
• CVE-2024-21496中 6.1All versions of the package github.com/greenpau/caddy-security are vulnerable to Cross-site Scripting (XSS) via the Referer header, due to i…
• CVE-2024-21495緊急 9.8Versions of the package github.com/greenpau/caddy-security before 1.0.42 are vulnerable to Insecure Randomness due to using an insecure rand…