Trail of Bits Blog company blog
Security flaws in an SSO plugin for Caddy (2023)
We identified 10 security vulnerabilities within the caddy-security plugin for the Caddy web server that could enable a variety of high-severity attacks in web applications, including client-side code execution, OAuth replay attacks, and unauthorized access to resources. During our evaluation, Caddy was deployed as a…
- Points
- 123
- HN comments
- 48
- Submissions
- 1
- Cited by
- 0 commenters
Security & PrivacyWeb & Frontend2024
On Hacker News
| Submitted | Title on HN | Points | Comments |
|---|---|---|---|
| Feb 12, 2024 | Security flaws in an SSO plugin for Caddy (2023) by mooreds | 123 | 48 |
