Lemonldap-ng vulnerabilities

Products

• Lemonldap\ 13
• Lemonldap-ng 4
• Apache\ 2
• Lemonldap::ng 2

Newest

• lemonldap-ng lemonldap::ng In LemonLDAP::NG before 2.16.7 and 2.17 through 2.21 before 2.21.3, OS command injection can... CVE-2025-59518 Fix available 8.0 HighSeptember 17, 2025
• lemonldap-ng lemonldap::ng In the portal in LemonLDAP::NG before 2.21.0, cross-site scripting (XSS) allows remote attackers... CVE-2025-31510 Fix available 7.2 HighApril 8, 2025
• lemonldap-ng An issue was discovered in LemonLDAP::NG before 2.20.1. An Improper Check during session refresh... CVE-2024-52946 Fix available 8.8 HighNovember 18, 2024
• lemonldap-ng An issue was discovered in LemonLDAP::NG before 2.0.12. There is a missing expiration check in... CVE-2021-35473 Fix available 9.1 CriticalNovember 10, 2024
• lemonldap-ng, lemonldap-ng lemonldap\ +1 more A cross-site scripting (XSS) vulnerability in LemonLDAP::NG before 2.19.3 allows remote attackers... CVE-2024-48933 Fix available 6.1 MediumOctober 9, 2024
• lemonldap-ng Incorrect credential validation in LemonLDAP::NG 2.18.x and 2.19.x before 2.19.2 allows attackers... CVE-2024-45160 Fix available 9.1 CriticalOctober 9, 2024
• lemonldap-ng lemonldap\ A Server-Side Request Forgery issue in the OpenID Connect Issuer in LemonLDAP::NG before 2.17.1... CVE-2023-44469 Fix available 4.3 MediumSeptember 29, 2023
• lemonldap-ng lemonldap\ In LemonLDAP::NG (aka lemonldap-ng) before 2.0.7, the default Apache HTTP Server configuration... CVE-2019-19791 Fix available 9.8 CriticalMay 29, 2023
• lemonldap-ng lemonldap\ An issue was discovered in LemonLDAP::NG before 2.16.1. Weak session ID generation in the... CVE-2023-28862 Fix available 9.8 CriticalMarch 31, 2023
• lemonldap-ng lemonldap\ In LemonLDAP::NG before 2.0.15. some sessions are not deleted when they are supposed to be... CVE-2022-37186 Fix available 5.9 MediumJanuary 28, 2023
• debian linux, lemonldap-ng apache\ +1 more In Apache::Session::Browseable before 1.3.6, validity of the X.509 certificate is not checked by... CVE-2020-36659 Fix available 8.1 HighJanuary 27, 2023
• debian linux, lemonldap-ng apache\ +1 more In Apache::Session::LDAP before 0.5, validity of the X.509 certificate is not checked by default... CVE-2020-36658 Fix available 8.1 HighJanuary 27, 2023
• debian linux, lemonldap-ng lemonldap\ +1 more An issue was discovered in LemonLDAP::NG (aka lemonldap-ng) 2.0.13. When using the RESTServer... CVE-2021-40874 Fix available 9.8 CriticalJuly 17, 2022
• debian linux, lemonldap-ng lemonldap\ +1 more In LemonLDAP::NG (aka lemonldap-ng) through 2.0.8, validity of the X.509 certificate is not... CVE-2020-16093 Fix available 7.5 HighJuly 17, 2022
• debian linux, lemonldap-ng lemonldap\ +1 more An issue was discovered in LemonLDAP::NG before 2.0.12. Session cache corruption can lead to... CVE-2021-35472 Fix available 8.8 HighJuly 23, 2021
• debian linux, lemonldap-ng lemonldap\ +1 more Lack of URL normalization may lead to authorization bypass when URL access rules are used CVE-2020-24660 Fix available 9.8 CriticalSeptember 7, 2020
• debian linux, lemonldap-ng lemonldap\ +1 more OpenID Connect Issuer in LemonLDAP::NG 2.x through 2.0.5 may allow an attacker to bypass access... CVE-2019-15941 Fix available 9.8 CriticalSeptember 25, 2019
• debian linux, lemonldap-ng lemonldap\ +1 more LemonLDAP::NG before 1.9.20 has an XML External Entity (XXE) issue when submitting a notification... CVE-2019-13031 Fix available 8.1 HighJune 28, 2019
• debian linux, lemonldap-ng lemonldap\ +1 more LemonLDAP::NG -2.0.3 has Incorrect Access Control. CVE-2019-12046 Fix available 9.8 CriticalMay 14, 2019
• lemonldap-ng lemonldap\ LemonLDAP::NG before 1.2.3 does not use the signature-verification capability of the Lasso... CVE-2012-6426 Fix available 7.5 HighJanuary 1, 2013