| Package | Affected versions | Patched versions |
|---|---|---|
| lemonldap | ≤ 2.0.8≤ 0.5.2 | |
| lemonldap-ng-handler | < 0.5.2 | 0.5.2 |
When access rules are used inside a protected host, some URL encodings may bypass filtering system.
Version 0.5.2 includes a patch that fixes the vulnerability
No way for users to fix or remediate the vulnerability without upgrading
https://gitlab.ow2.org/lemonldap-ng/lemonldap-ng/-/issues/2290
If you have any questions or comments about this advisory:
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free