CVE-2024-21494

CVE-2024-21494 affects all versions of the Go package github.com/greenpau/caddy-security, enabling authentication bypass through spoofing the X-Forwarded-For header due to improper input sanitization. An attacker can spoof an IP used in the user identity module’s /whoami endpoint, potentially gai...