Lucene search

K
cvelistMitreCVELIST:CVE-2023-52430
HistoryFeb 12, 2024 - 12:00 a.m.

CVE-2023-52430

2024-02-1200:00:00
mitre
www.cve.org
caddy security plugin
reflected xss
get request
url
admin
settings
mfa

5.8 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.2%

The caddy-security plugin 1.1.20 for Caddy allows reflected XSS via a GET request to a URL that contains an XSS payload and begins with either a /admin or /settings/mfa/delete/ substring.

5.8 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.2%

Related for CVELIST:CVE-2023-52430