5.3
Moyenne
CVE-2024-21493 All versions of the package github.com/greenpau/caddy-security are vulnerable to Improper Validation of Array Index when…
Description
All versions of the package github.com/greenpau/caddy-security are vulnerable to Improper Validation of Array Index when parsing a Caddyfile. Multiple parsing functions in the affected library do not validate whether their input values are nil before attempting to access elements, which can lead to a panic (index out of range). Panics during the parsing of a configuration file may introduce ambiguity and vulnerabilities, hindering the correct interpretation and configuration of the web server.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| github.com/greenpau/caddy-security | Versions non publiées |
Références
- security.snyk.io security.snyk.io
- blog.trailofbits.com blog.trailofbits.com
- github.com github.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de github.com/greenpau/caddy-security
Les 9 CVE de github.com/greenpau/caddy-security →
CVE-2024-21495
Versions of the package github.com/greenpau/caddy-security before 1.0.42 are vulnerable to Insecure Randomness due to…
6.5
Moyenne
CVE-2024-21494
All versions of the package github.com/greenpau/caddy-security are vulnerable to Authentication Bypass by Spoofing via…
5.4
Moyenne
CVE-2024-21500
All versions of the package github.com/greenpau/caddy-security are vulnerable to Improper Restriction of Excessive…
4.8
Moyenne
CVE-2024-21499
All versions of the package github.com/greenpau/caddy-security are vulnerable to HTTP Header Injection via the…
4.3
Moyenne