All vulnerabilities

Go

CVE-2022-28923

Open Redirect in Caddy

Severity
Medium 6.1
Published
7 Feb 2023
Last changed
10 Sept 2026
Added to UpHeron
22 Oct 2026
Fixed in
2.5.0-beta.1
Also known as
GHSA-qpm3-vr34-h8w8, GO-2023-1567
Sources
OSV.dev and GitHub

Affected software

SoftwareAffected versions
CaddyGo · osv:Go:github.com/caddyserver/caddy/v2
  • Every version before 2.5.0-beta.1

References