High severity7.5NVD Advisory· Published Jan 17, 2023· Updated Jun 17, 2026

CVE-2023-23749

Description

The 'LDAP Integration with Active Directory and OpenLDAP - NTLM & Kerberos Login' extension is vulnerable to LDAP Injection since is not properly sanitizing the 'username' POST parameter. An attacker can manipulate this paramter to dump arbitrary contents form the LDAP Database.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Joomla/LDAP Integration with Active Directory and OpenLDAP - NTLM & Kerberos Loginllm-fuzzy
Range: <5.0.2
Miniorange/LDAP Integration With Active Directory And Openldap2 versions
cpe:2.3:a:miniorange:ldap_integration_with_active_directory_and_openldap:5.0.2:*:*:*:*:joomla\!:*:*+ 1 more
- cpe:2.3:a:miniorange:ldap_integration_with_active_directory_and_openldap:5.0.2:*:*:*:*:joomla\!:*:*
- (no CPE)range: 5.0.2

Patches

Vulnerability mechanics

References

extensions.joomla.org/vulnerable-extensions/resolved/ldap-integration-with-active-directory-and-openldap-ntlm-kerberos-login-5-0-2-other/nvdThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000