Lucene search

K
redhatcveRedhat.comRH:CVE-2022-28923
HistoryFeb 07, 2023 - 4:56 a.m.

CVE-2022-28923

2023-02-0704:56:09
redhat.com
access.redhat.com
30
caddy
open redirect
unauthorized redirection

CVSS3

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS

0.002

Percentile

59.5%

An open redirect flaw was found in caddy. This issue may allow a malicious user to craft a link that redirects to any url they choose.

CVSS3

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS

0.002

Percentile

59.5%