GHSA-qpm3-vr34-h8w8

Source

https://github.com/advisories/GHSA-qpm3-vr34-h8w8

Import Source

https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2023/02/GHSA-qpm3-vr34-h8w8/GHSA-qpm3-vr34-h8w8.json

JSON Data

https://api.test.osv.dev/v1/vulns/GHSA-qpm3-vr34-h8w8

Aliases

Related

Published

2023-02-07T00:30:24Z

Modified

2025-03-27T03:53:05Z

Severity

6.1 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N CVSS Calculator

Summary

Open Redirect in Caddy

Details

Caddy v2.4.6 was discovered to contain an open redirection vulnerability which allows attackers to redirect users to phishing websites via crafted URLs

Database specific

{
    "severity": "MODERATE",
    "github_reviewed_at": "2023-02-15T15:35:34Z",
    "cwe_ids": [
        "CWE-601"
    ],
    "nvd_published_at": "2023-02-06T23:15:00Z",
    "github_reviewed": true
}

References

Affected packages

Go / github.com/caddyserver/caddy/v2

Package

Name: github.com/caddyserver/caddy/v2; View open source insights on deps.dev
Purl: pkg:golang/github.com/caddyserver/caddy/v2

Affected ranges

Type: SEMVER
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.5.0-beta.1