CVE-2023-44469

Mô tả

Tham khảo

• gitlab.ow2.org/lemonldap-ng/lemonldap-ng/-/issues/2998 · Issue Tracking
• gitlab.ow2.org/lemonldap-ng/lemonldap-ng/-/releases/v2.17.1 · Issue Tracking
• lists.debian.org/debian-lts-announce/2023/10/msg00014.html
• security.lauritz-holtmann.de/post/sso-security-ssrf · Not Applicable

Lỗ hổng khác của lemonldap

• CVE-2024-48933TRUNG BÌNH 6.1A cross-site scripting (XSS) vulnerability in LemonLDAP::NG before 2.19.3 allows remote attackers to inject arbitrary web script or HTML int…
• CVE-2019-19791NGHIÊM TRỌNG 9.8In LemonLDAP::NG (aka lemonldap-ng) before 2.0.7, the default Apache HTTP Server configuration does not properly restrict access to SOAP/RES…
• CVE-2022-37186TRUNG BÌNH 5.9In LemonLDAP::NG before 2.0.15. some sessions are not deleted when they are supposed to be deleted according to the timeoutActivity setting.…
• CVE-2023-28862NGHIÊM TRỌNG 9.8An issue was discovered in LemonLDAP::NG before 2.16.1. Weak session ID generation in the AuthBasic handler and incorrect failure handling d…
• CVE-2021-40874NGHIÊM TRỌNG 9.8An issue was discovered in LemonLDAP::NG (aka lemonldap-ng) 2.0.13. When using the RESTServer plug-in to operate a REST password validation …