CaddyWebServer : Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2026-77281)

Description

Caddy is an extensible server platform that uses TLS by default. In version 2.11.3 and earlier, three configuration-dependent weaknesses affect the handler and placeholder layer. In modules/caddyhttp/rewrite/rewrite.go, Rewrite.Rewrite() can pass attacker-controlled replacement bytes through buildQueryString for a second placeholder expansion when a rewrite URI ends with a literal question mark, allowing injected environment or request-variable placeholders to disclose data and, when the file pr

Remediation

References

Related Vulnerabilities

Severity

Classification

Tags