Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-9q8m-r734-6gg5

Опубликовано: 17 мая 2022
Источник: github
Github: Не прошло ревью

Описание

LemonLDAP::NG before 1.2.3 does not use the signature-verification capability of the Lasso library, which allows remote attackers to bypass intended access-control restrictions via crafted SAML data.

LemonLDAP::NG before 1.2.3 does not use the signature-verification capability of the Lasso library, which allows remote attackers to bypass intended access-control restrictions via crafted SAML data.

EPSS

Процентиль: 48%
0.00254
Низкий

Связанные уязвимости

ubuntu
около 13 лет назад

LemonLDAP::NG before 1.2.3 does not use the signature-verification capability of the Lasso library, which allows remote attackers to bypass intended access-control restrictions via crafted SAML data.

nvd
около 13 лет назад

LemonLDAP::NG before 1.2.3 does not use the signature-verification capability of the Lasso library, which allows remote attackers to bypass intended access-control restrictions via crafted SAML data.

debian
около 13 лет назад

LemonLDAP::NG before 1.2.3 does not use the signature-verification cap ...

EPSS

Процентиль: 48%
0.00254
Низкий