Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

  1. Reconshell
  2. Vulnerabilities (CVE)
Filtered by vendor Miniorange Subscribe
Filtered by product Ldap Integration With Active Directory And Openldap
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2023-23749 1 Miniorange 1 Ldap Integration With Active Directory And Openldap 2023-01-27 N/A 7.5 HIGH
The 'LDAP Integration with Active Directory and OpenLDAP - NTLM & Kerberos Login' extension is vulnerable to LDAP Injection since is not properly sanitizing the 'username' POST parameter. An attacker can manipulate this paramter to dump arbitrary contents form the LDAP Database.