CVE-2026-92700
2026-09-23
19h19 +00:00
19h19 +00:00
指定 CVE 通知
随时了解指定 CVE 的变更。
CVE 描述
Caddy is an extensible server platform that uses TLS by default. In version 2.11.3 and earlier, in modules/caddyhttp/fileserver/staticfiles.go, fileHidden() uses case-sensitive filepath.Match checks, so case variants can bypass hide rules on case-insensitive filesystems or when mixed-case paths coexist and expose files intended to be hidden.
CVE 信息
相关弱点
| 弱点名称 | 来源 | |
|---|---|---|
| Improper Handling of Case Sensitivity The product does not properly account for differences in case sensitivity when accessing or determining the properties of a resource, leading to inconsistent results. |
