Skip to contentLemonldap-ng Lemonldap\ vulnerabilities
- lemonldap-ng, lemonldap-ng lemonldap\ +1 moreA cross-site scripting (XSS) vulnerability in LemonLDAP::NG before 2.19.3 allows remote attackers...CVE-2024-48933Fix available6.1 Medium
- lemonldap-ng lemonldap\A Server-Side Request Forgery issue in the OpenID Connect Issuer in LemonLDAP::NG before 2.17.1...CVE-2023-44469Fix available4.3 Medium
- lemonldap-ng lemonldap\In LemonLDAP::NG (aka lemonldap-ng) before 2.0.7, the default Apache HTTP Server configuration...CVE-2019-19791Fix available9.8 Critical
- lemonldap-ng lemonldap\An issue was discovered in LemonLDAP::NG before 2.16.1. Weak session ID generation in the...CVE-2023-28862Fix available9.8 Critical
- lemonldap-ng lemonldap\In LemonLDAP::NG before 2.0.15. some sessions are not deleted when they are supposed to be...CVE-2022-37186Fix available5.9 Medium
- debian linux, lemonldap-ng lemonldap\ +1 moreAn issue was discovered in LemonLDAP::NG (aka lemonldap-ng) 2.0.13. When using the RESTServer...CVE-2021-40874Fix available9.8 Critical
- debian linux, lemonldap-ng lemonldap\ +1 moreIn LemonLDAP::NG (aka lemonldap-ng) through 2.0.8, validity of the X.509 certificate is not...CVE-2020-16093Fix available7.5 High
- debian linux, lemonldap-ng lemonldap\ +1 moreAn issue was discovered in LemonLDAP::NG before 2.0.12. Session cache corruption can lead to...CVE-2021-35472Fix available8.8 High
- debian linux, lemonldap-ng lemonldap\ +1 moreLack of URL normalization may lead to authorization bypass when URL access rules are usedCVE-2020-24660Fix available9.8 Critical
- debian linux, lemonldap-ng lemonldap\ +1 moreOpenID Connect Issuer in LemonLDAP::NG 2.x through 2.0.5 may allow an attacker to bypass access...CVE-2019-15941Fix available9.8 Critical
- debian linux, lemonldap-ng lemonldap\ +1 moreLemonLDAP::NG before 1.9.20 has an XML External Entity (XXE) issue when submitting a notification...CVE-2019-13031Fix available8.1 High
- debian linux, lemonldap-ng lemonldap\ +1 moreLemonLDAP::NG -2.0.3 has Incorrect Access Control.CVE-2019-12046Fix available9.8 Critical
- lemonldap-ng lemonldap\LemonLDAP::NG before 1.2.3 does not use the signature-verification capability of the Lasso...CVE-2012-6426Fix available7.5 High