Описание
CISA Thorium does not escape user controlled strings used in LDAP queries. An authenticated remote attacker can modify LDAP authorization data such as group memberships. Fixed in 1.1.1.
Ссылки
- Patch
- Release Notes
- Third Party Advisory
- Third Party Advisory
Уязвимые конфигурации
Конфигурация 1Версия от 1.0.0 (включая) до 1.1.1 (исключая)
cpe:2.3:a:cisa:thorium:*:*:*:*:*:*:*:*
EPSS
Процентиль: 23%
0.00078
Низкий
5.4 Medium
CVSS3
Дефекты
CWE-90
Связанные уязвимости
CVSS3: 5.4
github
5 месяцев назад
CISA Thorium does not escape user controlled strings used in LDAP queries. An authenticated remote attacker can modify LDAP authorization data such as group memberships. Fixed in 1.1.1.
EPSS
Процентиль: 23%
0.00078
Низкий
5.4 Medium
CVSS3
Дефекты
CWE-90