PatchTheCVEauthcrunch vulnerabilities
Recent CVEs affecting authcrunch products. 5 tracked.
authcrunch has 5 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2024-02-17. Highest priority: CVE-2024-21498 (score 40/100).
- CVE-2024-21500 MEDIUM 4.8 MITIGATE All versions of the package github.com/greenpau/caddy-security are vulnerable to Improper Restriction of Exces
- CVE-2024-21498 MEDIUM 5.3 MITIGATE All versions of the package github.com/greenpau/caddy-security are vulnerable to Server-side Request Forgery (
- CVE-2024-21496 MEDIUM 6.1 MITIGATE All versions of the package github.com/greenpau/caddy-security are vulnerable to Cross-site Scripting (XSS) vi
- CVE-2024-21492 MEDIUM 4.8 MITIGATE All versions of the package github.com/greenpau/caddy-security are vulnerable to Insufficient Session Expirati
- CVE-2023-52430 MEDIUM 6.1 DOWNGRADE The caddy-security plugin 1.1.20 for Caddy allows reflected XSS via a GET request to a URL that contains an XS
FAQ
How do I fix authcrunch vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is authcrunch being exploited right now?
None of the tracked authcrunch CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which authcrunch CVE should I patch first?
CVE-2024-21498 currently ranks highest (40/100): All versions of the package github.com/greenpau/caddy-security are vulnerable to Server-side Request Forgery (.