Description
Caddy is an extensible server platform that uses TLS by default. From version 2.10.0 to before version 2.11.2, forward_auth copy_headers does not strip client-supplied headers, allowing identity injection and privilege escalation. This issue has been patched in version 2.11.2.
Remediation
References
Related Vulnerabilities
Joomla Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2020-35614)
WordPress Plugin Fileviewer Cross-Site Request Forgery (2.2)
WordPress Plugin WordPress Landing Pages Cross-Site Scripting (1.8.7)
WebLogic Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2022-22965)
WordPress Plugin GiveWP-Donation and Fundraising Platform Cross-Site Scripting (0.8)