CVE-2024-21498

CVE-2024-21498 : SSRF in the Go package github.com/greenpau/caddy-security across all versions, caused by manipulation of the X-Forwarded-Host header. Impact: attacker may access sensitive data or reach internal services. Remediation status: no concrete fix version is identified in the provided d...

CVE-2024-21500

The CVE-2024-21500 entry concerns the GitHub package github.com/greenpau/caddy-security, with reports across multiple sources (Red Hat, OSV, GHSA, PT-Security, etc.) that all versions are vulnerable to Improper Restriction of Excessive Authentication Attempts via 2FA. The core issue is a bypass o...