Vulnerability Database
289,598
Total vulnerabilities in the database
CVE-2022-28923
Caddy v2.4.6 was discovered to contain an open redirection vulnerability which allows attackers to redirect users to phishing websites via crafted URLs.
| Software | From | Fixed in |
|---|---|---|
| caddyserver / caddy | 2.4.6 | 2.4.6.x |
github.com/caddyserver/caddy/v2
|
- | 2.5.0-beta.1 |
- https://github.com/caddyserver/caddy/commit/78b5356f2b1945a90de1ef7f2c7669d82098edbd
- https://lednerb.de/en/publications/responsible-disclosure/caddy-open-redirect-vulnerability
- https://lednerb.de/en/publications/responsible-disclosure/caddy-open-redirect-vulnerability/
- https://pkg.go.dev/vuln/GO-2023-1567