CVE-2024-21497

CVE-2024-21497 is an Open Redirect vulnerability affecting all versions of the greenpau/caddy-security package. An attacker can exploit this by manipulating the redirect_url parameter to redirect users to malicious websites, facilitating phishing attacks. This vulnerability has a CVSS score of 6.1 (Medium), indicating a low-complexity attack requiring user interaction (e.g., clicking a link) to achieve partial confidentiality and integrity impact. There is currently no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.