Skip to main content
cve.nowby Sazabi
← Go
GoPackage

github.com/greenpau/caddy-security

10 known vulnerabilities (10 medium), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
10 · 10 medium
Registry
pkg.go.dev

Advisories 10

  • CVE-2024-21493Medium 5.3

    All versions of the package github.com/greenpau/caddy-security are vulnerable to Improper Validation of Array Index when parsing a…

    Affected: through 1.1.23; all versions.

  • CVE-2024-21495Medium 6.5

    Versions of the package github.com/greenpau/caddy-security before 1.0.42 are vulnerable to Insecure Randomness due to using an insecure…

    Affected: through 1.0.42; all versions.

  • CVE-2024-21494Medium 5.4

    All versions of the package github.com/greenpau/caddy-security are vulnerable to Authentication Bypass by Spoofing via the X-Forwarded-For…

    Affected: through 1.1.23; all versions.

  • CVE-2024-21500Medium 4.8

    All versions of the package github.com/greenpau/caddy-security are vulnerable to Improper Restriction of Excessive Authentication Attempts…

    Affected: through 1.1.23; all versions.

  • CVE-2024-21499Medium 4.3

    All versions of the package github.com/greenpau/caddy-security are vulnerable to HTTP Header Injection via the X-Forwarded-Proto header…

    Affected: all versions; through 1.1.23.

  • CVE-2024-21498Medium 5.3

    All versions of the package github.com/greenpau/caddy-security are vulnerable to Server-side Request Forgery (SSRF) via X-Forwarded-Host…

    Affected: through 1.1.23; all versions.

  • CVE-2024-21497Medium 5.4

    Versions of the package github.com/greenpau/caddy-security are vulnerable to Open Redirect via the redirect_url parameter.

    Affected: through 1.1.23; all versions.

  • CVE-2024-21492Medium 4.8

    All versions of the package github.com/greenpau/caddy-security are vulnerable to Insufficient Session Expiration due to improper user…

    Affected: through 1.1.23; all versions.

  • CVE-2024-21496Medium 6.1

    All versions of the package github.com/greenpau/caddy-security are vulnerable to Cross-site Scripting (XSS) via the Referer header, due to…

    Affected: through 1.1.23; all versions.

  • CVE-2023-52430Medium 5.4

    The caddy-security plugin 1.1.20 for Caddy allows reflected XSS via a GET request to a URL that contains an XSS payload and begins with…

    Affected: all versions; through 1.1.20.