Vulnerability Description
Caddy v2.4 was discovered to contain an open redirect vulnerability. A remote unauthenticated attacker may exploit this vulnerability to redirect users to arbitrary web URLs by tricking the victim users to click on crafted links.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Caddyserver | Caddy | >= 2.4.0, < 2.5.0 |
Related Weaknesses (CWE)
References
- https://github.com/caddyserver/caddy/pull/4499Issue TrackingPatchThird Party Advisory
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorapro
- https://github.com/caddyserver/caddy/pull/4499Issue TrackingPatchThird Party Advisory
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorapro
FAQ
What is CVE-2022-29718?
CVE-2022-29718 is a vulnerability with a CVSS score of 6.1 (MEDIUM). Caddy v2.4 was discovered to contain an open redirect vulnerability. A remote unauthenticated attacker may exploit this vulnerability to redirect users to arbitrary web URLs by tricking the victim use...
How severe is CVE-2022-29718?
CVE-2022-29718 has been rated MEDIUM with a CVSS base score of 6.1/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2022-29718?
Check the references section above for vendor advisories and patch information. Affected products include: Caddyserver Caddy.