Caddy 2.4.6 - Open Redirect

Caddy 2.4.6 contains an open redirect vulnerability. An attacker can redirect a user to a malicious site via a crafted URL and possibly obtain sensitive information, modify data, and/or execute unauthorized operations. id: CVE-2022-28923 info: name: Caddy 2.4.6 - Open Redirect author: Sascha...

Open Redirect

github.com/caddyserver/caddy is vulnerable to Open Redirect. The vulnerability is caused by the SanitizedPathJoin and directoryListing functions due to improper URL sanitization, allowing an attacker to craft a malicious URL resulting in open redirect...

Authentication Bypass

github.com/caddyserver/caddy is vulnerable to authentication bypass. When TLS is used for client authentication, it does not enforce a tls: StrictHostMatching mode for client authentication, leading to a bypass of TLS authentication...