Lucene search

K
ubuntucveUbuntu.comUB:CVE-2022-28923
HistoryFeb 06, 2023 - 12:00 a.m.

CVE-2022-28923

2023-02-0600:00:00
ubuntu.com
ubuntu.com
9
caddy v2.4.6
open redirection
phishing websites
crafted urls
unix

CVSS3

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS

0.002

Percentile

59.5%

Caddy v2.4.6 was discovered to contain an open redirection vulnerability
which allows attackers to redirect users to phishing websites via crafted
URLs.

CVSS3

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS

0.002

Percentile

59.5%