Lucene search

K
prionPRIOn knowledge basePRION:CVE-2024-21493
HistoryFeb 17, 2024 - 5:15 a.m.

Input validation

2024-02-1705:15:00
PRIOn knowledge base
www.prio-n.com
5
github.com/greenpau/caddy-security
improper validation
array index
caddyfile
panics
configuration file
ambiguity
vulnerabilities
web server

7.1 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

15.7%

All versions of the package github.com/greenpau/caddy-security are vulnerable to Improper Validation of Array Index when parsing a Caddyfile. Multiple parsing functions in the affected library do not validate whether their input values are nil before attempting to access elements, which can lead to a panic (index out of range). Panics during the parsing of a configuration file may introduce ambiguity and vulnerabilities, hindering the correct interpretation and configuration of the web server.

7.1 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

15.7%

Related for PRION:CVE-2024-21493