Skip to content
OpenAdvisories
Medium · 5.3 CVE-2024-21493 EUVD-2024-0575GHSA-8h95-jcp5-pjprGO-2024-2564

Improper Validation of Array Index in github.com/greenpau/caddy-security

Published Feb 17, 2024 · Updated Aug 1, 2024 · Assigned by snyk

Description

All versions of the package github.com/greenpau/caddy-security are vulnerable to Improper Validation of Array Index when parsing a Caddyfile. Multiple parsing functions in the affected library do not validate whether their input values are nil before attempting to access elements, which can lead to a panic (index out of range). Panics during the parsing of a configuration file may introduce ambiguity and vulnerabilities, hindering the correct interpretation and configuration of the web server.

Affected products

VendorProductAffectedFixed
— github.com/greenpau/caddy-security — —

Affected packages

EcosystemPackageAffectedFixedRecord
Go github.com/greenpau/caddy-security <= 1.1.23 — GHSA-8h95-jcp5-pjpr
Go github.com/greenpau/caddy-security all versions — GO-2024-2564

References