CVE-2026-92700
2026-09-23
19h19 +00:00
19h19 +00:00
特定のCVEの通知
特定のCVEの変更情報をいち早くお届けします。
CVE の説明
Caddy is an extensible server platform that uses TLS by default. In version 2.11.3 and earlier, in modules/caddyhttp/fileserver/staticfiles.go, fileHidden() uses case-sensitive filepath.Match checks, so case variants can bypass hide rules on case-insensitive filesystems or when mixed-case paths coexist and expose files intended to be hidden.
CVE の情報
関連する弱点
| 弱点名 | 出典 | |
|---|---|---|
| Improper Handling of Case Sensitivity The product does not properly account for differences in case sensitivity when accessing or determining the properties of a resource, leading to inconsistent results. |
