Design/Logic Flaw

2024-02-1705:15:00

PRIOn knowledge base

www.prio-n.com

vulnerability

http header injection

x-forwarded-proto

bypass

security mechanisms

tls confusion

7.5 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

15.7%

JSON

All versions of the package github.com/greenpau/caddy-security are vulnerable to HTTP Header Injection via the X-Forwarded-Proto header due to redirecting to the injected protocol.Exploiting this vulnerability could lead to bypass of security mechanisms or confusion in handling TLS.