CVE-2024-21493 | BDVDB-2026-224926 Detail

Description#

All versions of the package github.com/greenpau/caddy-security are vulnerable to Improper Validation of Array Index when parsing a Caddyfile. Multiple parsing functions in the affected library do not validate whether their input values are nil before attempting to access elements, which can lead to a panic (index out of range). Panics during the parsing of a configuration file may introduce ambiguity and vulnerabilities, hindering the correct interpretation and configuration of the web server.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12024-02-17Record published in the CVE List.
2. Version 22024-08-01Most recent update recorded in the CVE List.