CVE-2024-21498

CVE-2024-21498 is a Server-side Request Forgery (SSRF) vulnerability affecting all versions of the github.com/greenpau/caddy-security package, including authcrunch caddy-security. An attacker can exploit this by manipulating the X-Forwarded-Host header, potentially exposing sensitive information, interacting with internal services, or leveraging other network vulnerabilities. Rated Medium severity (CVSS 5.3), this vulnerability is network-exploitable with low attack complexity and no user interaction required, primarily impacting confidentiality. There is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.