Open Redirection

github.com/greenpau/caddy-security is vulnerable to Open Redirect. The vulnerability is caused when a user clicks on a specially crafted link with a redirect_url parameter while logged in, resulting in the user being redirected to an arbitrary site. The user must take an action, such as clicking on a portal button or using the browser’s back button, to trigger the redirection which can lead to a phishing attack.