CVE-2024-21497 | BDVDB-2026-224930 Detail

Description#

Versions of the package github.com/greenpau/caddy-security are vulnerable to Open Redirect via the redirect_url parameter. An attacker could perform a phishing attack and trick users into visiting a malicious website by crafting a convincing URL with this parameter. To exploit this vulnerability, the user must take an action, such as clicking on a portal button or using the browser’s back button, to trigger the redirection.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12024-02-17Record published in the CVE List.
2. Version 22026-03-03Most recent update recorded in the CVE List.