~ / search / GHSA-2927-hv3p-f3vp

GHSA-2927-hv3p-f3vp

Open redirect in caddy

Source: GitHub Advisory Database (reviewed) Moderate CVE-2022-29718

Packages

EcosystemPackageAffectedFixed in
Go github.com/caddyserver/caddy < 2.5.0 2.5.0
Go github.com/caddyserver/caddy/v2 < 2.5.0 2.5.0

Details

As written in the advisory (Markdown source, shown as plain text).

Caddy v2.4 was discovered to contain an open redirect vulnerability. A remote unauthenticated attacker may exploit this vulnerability to redirect users to arbitrary web URLs by tricking the victim users to click on crafted links.

References

External links from the advisory. They lead to third-party sites.