GHSA-93x8-66j2-wwr5
Server-Side Request Forgery in github.com/greenpau/caddy-security
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| Go | github.com/greenpau/caddy-security | <= 1.1.23 | no fix listed |
Details
As written in the advisory (Markdown source, shown as plain text).
All versions of the package github.com/greenpau/caddy-security are vulnerable to Server-side Request Forgery (SSRF) via X-Forwarded-Host header manipulation. An attacker can expose sensitive information, interact with internal services, or exploit other vulnerabilities within the network by exploiting this vulnerability.
References
External links from the advisory. They lead to third-party sites.