2020-06-15 16:50:25
mitre
PUBLISHED
Caddy before 0.10.13 mishandles TLS client authentication, as demonstrated by an authentication bypass caused by the lack of the StrictHostMatching mode.