5.3
Medium
CVE-2024-21498 All versions of the package github.com/greenpau/caddy-security are vulnerable to Server-side Request Forgery (SSRF)…
Description
All versions of the package github.com/greenpau/caddy-security are vulnerable to Server-side Request Forgery (SSRF) via X-Forwarded-Host header manipulation. An attacker can expose sensitive information, interact with internal services, or exploit other vulnerabilities within the network by exploiting this vulnerability.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| github.com/greenpau/caddy-security | Versions not published | |
| caddy_security | Versions not published |
References
- security.snyk.io security.snyk.io
- github.com github.com
- blog.trailofbits.com blog.trailofbits.com
Timeline
- Published
- Last modified
Other CVEs of github.com/greenpau/caddy-security
The 9 CVEs of github.com/greenpau/caddy-security →
CVE-2024-21493
All versions of the package github.com/greenpau/caddy-security are vulnerable to Improper Validation of Array Index when…
5.3
Medium
CVE-2024-21495
Versions of the package github.com/greenpau/caddy-security before 1.0.42 are vulnerable to Insecure Randomness due to…
6.5
Medium
CVE-2024-21494
All versions of the package github.com/greenpau/caddy-security are vulnerable to Authentication Bypass by Spoofing via…
5.4
Medium
CVE-2024-21500
All versions of the package github.com/greenpau/caddy-security are vulnerable to Improper Restriction of Excessive…
4.8
Medium