CVE-2023-52430

Description

caddy-security plugin for Caddy vulnerable to reflected Cross-site Scripting in github.com/greenpau/caddy-security

Affected packages (2)

• Go/github.com/greenpau/caddy-securityfrom 0, <= 1.1.20
• Go/github.com/greenpau/caddy-securityfrom 0

CVSS scores

References (5)

• ADVISORYhttps://github.com/advisories/GHSA-xwmv-cx7p-fqfc
• ADVISORYhttps://nvd.nist.gov/vuln/detail/CVE-2023-52430
• PATCHhttps://github.com/greenpau/caddy-security
• WEBhttps://blog.trailofbits.com/2023/09/18/security-flaws-in-an-sso-plugin-for-caddy
• WEBhttps://github.com/greenpau/caddy-security/issues/264