Caddy Security
Approved changes feed: RSS · Atom
cpe:2.3:a:authcrunch:caddy-security:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Authcrunch (a479025c-cf18-56c9-a0c8-bd29ad833eeb) |
|---|---|
| Product | Caddy Security (1c66d080-d284-5a5b-a544-63d8ef9f36b0) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-21500 |
vulnerable | 2026-06-08 06:27:35.434029 |
Details available
MEDIUM (4.8)
All versions of the package github.com/greenpau/caddy-security are vulnerable to Improper Restriction of Excessive Authentication Attempts via the two-factor authentication (2FA). Although the application blocks the user after several failed attempts to provide 2FA codes, attackers can bypass this blocking mechanism by automating the application’s full multistep 2FA process.
Published: 2024-02-17T05:00:06.899Z
Updated: 2024-12-05T20:33:44.652Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-21498 |
vulnerable | 2026-06-08 06:27:35.433140 |
Details available
MEDIUM (5.3)
All versions of the package github.com/greenpau/caddy-security are vulnerable to Server-side Request Forgery (SSRF) via X-Forwarded-Host header manipulation. An attacker can expose sensitive information, interact with internal services, or exploit other vulnerabilities within the network by exploiting this vulnerability.
Published: 2024-02-17T05:00:05.493Z
Updated: 2024-08-01T22:20:40.839Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.