CVE-2020-16093

概要

参考情報

• gitlab.ow2.org/lemonldap-ng/lemonldap-ng/-/issues/2250 · Exploit
• lemonldap-ng.org/download · Vendor Advisory
• lists.debian.org/debian-lts-announce/2023/01/msg00027.html · Mailing List

lemonldap のその他の脆弱性

• CVE-2024-48933中 6.1A cross-site scripting (XSS) vulnerability in LemonLDAP::NG before 2.19.3 allows remote attackers to inject arbitrary web script or HTML int…
• CVE-2023-44469中 4.3A Server-Side Request Forgery issue in the OpenID Connect Issuer in LemonLDAP::NG before 2.17.1 allows authenticated remote attackers to sen…
• CVE-2019-19791緊急 9.8In LemonLDAP::NG (aka lemonldap-ng) before 2.0.7, the default Apache HTTP Server configuration does not properly restrict access to SOAP/RES…
• CVE-2022-37186中 5.9In LemonLDAP::NG before 2.0.15. some sessions are not deleted when they are supposed to be deleted according to the timeoutActivity setting.…
• CVE-2023-28862緊急 9.8An issue was discovered in LemonLDAP::NG before 2.16.1. Weak session ID generation in the AuthBasic handler and incorrect failure handling d…