Skip to content
OpenAdvisories

Package · Go

github.com/caddyserver/caddy

6 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low 3.7
    CVE-2018-19148

    Caddy allows enumeration of Certificates and Hostnames

    Caddy through 0.11.0 sends incorrect certificates for certain invalid requests, making it easier for attackers to enumerate hostnames. Specifically, when unable to match a Host header with a vhost in its configuration, it serves the X.509 certificate for a ra…

    github.com/caddyserver/caddy Go