Количество 5
Количество 5
CVE-2020-24660
An issue was discovered in LemonLDAP::NG through 2.0.8, when NGINX is used. An attacker may bypass URL-based access control to protected Virtual Hosts by submitting a non-normalized URI. This also affects versions before 0.5.2 of the "Lemonldap::NG handler for Node.js" package.
CVE-2020-24660
An issue was discovered in LemonLDAP::NG through 2.0.8, when NGINX is used. An attacker may bypass URL-based access control to protected Virtual Hosts by submitting a non-normalized URI. This also affects versions before 0.5.2 of the "Lemonldap::NG handler for Node.js" package.
CVE-2020-24660
An issue was discovered in LemonLDAP::NG through 2.0.8, when NGINX is ...
GHSA-x44x-r84w-8v67
Lack of URL normalization may lead to authorization bypass when URL access rules are used
BDU:2022-06254
Уязвимость системы аутентификации для веб-приложений LemonLDAP::NG, связанная с ошибкой обработки ключей авторизации, позволяющая нарушителю получить несанкционированный доступ к информации
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2020-24660 An issue was discovered in LemonLDAP::NG through 2.0.8, when NGINX is used. An attacker may bypass URL-based access control to protected Virtual Hosts by submitting a non-normalized URI. This also affects versions before 0.5.2 of the "Lemonldap::NG handler for Node.js" package. | CVSS3: 9.8 | 1% Низкий | больше 5 лет назад |
 | CVE-2020-24660 An issue was discovered in LemonLDAP::NG through 2.0.8, when NGINX is used. An attacker may bypass URL-based access control to protected Virtual Hosts by submitting a non-normalized URI. This also affects versions before 0.5.2 of the "Lemonldap::NG handler for Node.js" package. | CVSS3: 9.8 | 1% Низкий | больше 5 лет назад |
| CVE-2020-24660 An issue was discovered in LemonLDAP::NG through 2.0.8, when NGINX is ... | CVSS3: 9.8 | 1% Низкий | больше 5 лет назад |
| GHSA-x44x-r84w-8v67 Lack of URL normalization may lead to authorization bypass when URL access rules are used | CVSS3: 6.5 | 1% Низкий | больше 5 лет назад |
 | BDU:2022-06254 Уязвимость системы аутентификации для веб-приложений LemonLDAP::NG, связанная с ошибкой обработки ключей авторизации, позволяющая нарушителю получить несанкционированный доступ к информации | CVSS3: 9.8 | 1% Низкий | больше 5 лет назад |
Уязвимостей на страницу