Server Side Request Forgery (SSRF)

github.com/greenpau/caddy-security is vulnerable of Server Side Request Forgery (SSRF). The vulnerability due to improper X-Forwarded-Host validation. An attacker can manipulate the X-Forwarded-Host header to interact with internal services on the network, potentially resulting in sensitive information disclosure or other vulnerabilities present on the internal network.