Ldap Integration With Active Directory And Openldap

1 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2023-23749 HIGH This Week

The 'LDAP Integration with Active Directory and OpenLDAP - NTLM & Kerberos Login' extension is vulnerable to LDAP Injection since is not properly sanitizing the 'username' POST parameter. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Code Injection Ldap Integration With Active Directory And Openldap

NVD

CVSS 3.1

7.5

EPSS

0.6%

CVE-2023-23749

EPSS 1% CVSS 7.5

HIGH This Week

The 'LDAP Integration with Active Directory and OpenLDAP - NTLM & Kerberos Login' extension is vulnerable to LDAP Injection since is not properly sanitizing the 'username' POST parameter. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Code Injection Ldap Integration With Active Directory And Openldap

NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy