x/vulndb: potential Go vuln in github.com/greenpau/caddy-security: CVE-2024-21498

[GoVulnBot]

CVE-2024-21498 references [Path is unknown](https://Path is unknown), which may be a Go module.

Description:
All versions of the package github.com/greenpau/caddy-security are vulnerable to Server-side Request Forgery (SSRF) via X-Forwarded-Host header manipulation. An attacker can expose sensitive information, interact with internal services, or exploit other vulnerabilities within the network by exploiting this vulnerability.

References:

• NIST: https://nvd.nist.gov/vuln/detail/CVE-2024-21498
• JSON: https://github.com/CVEProject/cvelist/tree/089b22bf0664d436ab15e62fe0e7a088182fd793/2024/21xxx/CVE-2024-21498.json
• web: https://security.snyk.io/vuln/SNYK-GOLANG-GITHUBCOMGREENPAUCADDYSECURITY-6249862
• report: X-Forwarded-Host Header Manipulation greenpau/caddy-security#269
• web: https://blog.trailofbits.com/2023/09/18/security-flaws-in-an-sso-plugin-for-caddy/
• Imported by: https://pkg.go.dev/Path is unknown?tab=importedby

Cross references:
No existing reports found with this module or alias.

See doc/triage.md for instructions on how to triage this report.

id: GO-ID-PENDING
modules:
    - module: Path is unknown
      packages:
        - package: github.com/greenpau/caddy-security
cves:
    - CVE-2024-21498
references:
    - web: https://security.snyk.io/vuln/SNYK-GOLANG-GITHUBCOMGREENPAUCADDYSECURITY-6249862
    - report: https://github.com/greenpau/caddy-security/issues/269
    - web: https://blog.trailofbits.com/2023/09/18/security-flaws-in-an-sso-plugin-for-caddy/

[gopherbot]

Change https://go.dev/cl/568975 mentions this issue: data/excluded: add GO-2024-2561.yaml

[gopherbot]

Change https://go.dev/cl/592778 mentions this issue: data/reports: unexclude 80 reports