Greenpau Caddy-Security
5 CVEs affecting Greenpau Caddy-Security. Latest disclosed: 2024-02-17. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-21495 | Medium | 6.5 | 2024-02-17 | Versions of the package github.com/greenpau/caddy-security before 1.0.42 are vulnerable to Insecure Randomness due to using an insecure random number generatio… |
CVE-2024-21497 | Medium | 5.4 | 2024-02-17 | Versions of the package github.com/greenpau/caddy-security are vulnerable to Open Redirect via the redirect_url parameter. An attacker could perform a phishin… |
CVE-2024-21494 | Medium | 5.4 | 2024-02-17 | All versions of the package github.com/greenpau/caddy-security are vulnerable to Authentication Bypass by Spoofing via the X-Forwarded-For header due to improp… |
CVE-2024-21493 | Medium | 5.3 | 2024-02-17 | All versions of the package github.com/greenpau/caddy-security are vulnerable to Improper Validation of Array Index when parsing a Caddyfile. Multiple parsing… |
CVE-2024-21499 | Medium | 4.3 | 2024-02-17 | All versions of the package github.com/greenpau/caddy-security are vulnerable to HTTP Header Injection via the X-Forwarded-Proto header due to redirecting to t… |