← Database

CVE-2022-28923

MEDIUM CVSS: 6.1 Published: 2023-02-06 Modified: 2026-06-17

Description

Caddy v2.4.6 was discovered to contain an open redirection vulnerability which allows attackers to redirect users to phishing websites via crafted URLs.

Affected Platforms

Caddyserver Caddy

Weakness Type

CWE-601, CWE-601

References