PT-2024-18911 · Unknown · Caddy-Security

David Pokora + 2 · Published 2024-02-16 · Updated 2024-11-06 · CVE-2024-21496

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions github.com/greenpau/caddy-security versions all

Description The issue is related to Cross-site Scripting (XSS) via the Referer header, caused by improper input sanitization. Although some characters are escaped to prevent XSS, the sanitization does not account for attacks based on the JavaScript URL scheme. This could lead to the execution of malicious scripts in the context of the target user's browser, compromising user sessions.

Recommendations For github.com/greenpau/caddy-security versions all, consider implementing proper input sanitization for the Referer header to prevent XSS attacks. As a temporary workaround, consider restricting access to sensitive resources that rely on the Referer header until a proper fix is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2024-21496

GHSA-FF72-FF42-C3GW

GO-2024-2559

Affected Products

Caddy-Security

References · 10

• 🔥 https://github.com/greenpau/caddy-security/issues/267 · Exploit
• 🔥 https://blog.trailofbits.com/2023/09/18/security-flaws-in-an-sso-plugin-for-caddy · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2024-21496 · Security Note
• https://osv.dev/vulnerability/GO-2024-2559 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2024-21496 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-ff72-ff42-c3gw · Vendor Advisory
• https://security.snyk.io/vuln/SNYK-GOLANG-GITHUBCOMGREENPAUCADDYSECURITY-6249860 · Note
• https://twitter.com/VulmonFeeds/status/1758743926431772927 · Twitter Post
• https://github.com/advisories/GHSA-ff72-ff42-c3gw · Note
• https://twitter.com/CVEnew/status/1758721378990297234 · Twitter Post