~ / search / GHSA-8hp3-rmr7-xh88

GHSA-8hp3-rmr7-xh88

Open Redirect in github.com/greenpau/caddy-security

Source: GitHub Advisory Database (reviewed) Moderate CVE-2024-21497

Packages

EcosystemPackageAffectedFixed in
Go github.com/greenpau/caddy-security <= 1.1.23 no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

All versions of the package github.com/greenpau/caddy-security are vulnerable to Open Redirect via the redirect_url parameter. An attacker could perform a phishing attack and trick users into visiting a malicious website by crafting a convincing URL with this parameter. To exploit this vulnerability, the user must take an action, such as clicking on a portal button or using the browser’s back button, to trigger the redirection.

References

External links from the advisory. They lead to third-party sites.