mohammed90 github.com/mohammed90/caddy-ssh vulnerabilities

Latest mohammed90 github.com/mohammed90/caddy-ssh CVEs

Newest publication first

1. GHSA-gmhj-xjfh-cf6m Caddy-SSH vulnerable to Authorization Bypass due to incorrect usage of PAM library

   Published 2022-09-23

   High·CVSS 7.7

   Not invoking a call to pam_acct_mgmt after a call to pam_authenticate to check the validity of a login can lead to an authorization bypass. Impact Exploitability The attack can be carried over the network. A complex non-standard configuration or a specialized condition is require...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.