CVE-2018-21246

CVE-2018-21246

Published · Updated

Follow this CVE+ Monitor github.com/caddyserver/caddy+ Monitor github.com/mholt/caddy

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 2.7%
Caddy before 0.10.13 mishandles TLS client authentication, as demonstrated by an authentication bypass caused by the lack of the StrictHostMatching mode.
Affected products
n/a · n/a