PT-2025-15633 · Unknown+1 · Lemonldap::Ng+1

CVE-2025-31510

·

Publicado

2025-01-01

·

Atualizado

2026-01-16

CVSS v3.1

7.2

Alta

VetorAV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions: LemonLDAP::NG versions prior to 2.21.0
Description: The issue is related to an XSS problem. The LemonLDAP::NG community has released a new version, 2.21.0, which includes a fix for this issue.
Recommendations: For versions prior to 2.21.0, update to version 2.21.0 to resolve the issue. If you are using a custom plugin or need help with other versions, consider reaching out for support.

Exploit

Correção

XSS

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

BDU:2025-14108
CVE-2025-31510
DLA-4119-1
DSA-5897-1

Produtos afetados

Debian
Lemonldap::Ng