CVE-2020-15259

Name of the Vulnerable Software and Affected Versions ad-ldap-connector versions prior to 5.0.13

Description The issue concerns a lack of CSRF protection in the admin panel, which can be exploited to achieve remote code execution or result in confidential data loss. This can occur when a user visits a malicious page with a CSRF payload on the same machine that has access to the admin console via a browser.

Recommendations For versions prior to 5.0.13, update to version 5.0.13 to resolve the issue. As a temporary workaround, consider disabling the admin console until the update is applied. Additionally, avoid visiting public URLs on the machine where the admin console is installed to minimize the risk of exploitation.