CVE-2018-21246

Caddy before 0.10.13 mishandles TLS client authentication, as demonstrated by an authentication bypass caused by the lack of the StrictHostMatching mode.

Date published : 2020-06-15

https://bugs.gentoo.org/715214

https://github.com/caddyserver/caddy/releases/tag/v0.10.13