Unrated severityNVD Advisory· Published Jan 17, 2023· Updated Apr 4, 2025

Extension - miniorange - LDAP Integration - LDAP Injection (username)

CVE-2023-23749

Description

The 'LDAP Integration with Active Directory and OpenLDAP - NTLM & Kerberos Login' extension is vulnerable to LDAP Injection since is not properly sanitizing the 'username' POST parameter. An attacker can manipulate this paramter to dump arbitrary contents form the LDAP Database.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Joomla/LDAP Integration with Active Directory and OpenLDAP - NTLM & Kerberos Loginllm-create
miniorange/LDAP Integration with Active Directory and OpenLDAP - NTLM & Kerberos Loginv5
Range: 5.0.2

Patches

Vulnerability mechanics

References

extensions.joomla.org/vulnerable-extensions/resolved/ldap-integration-with-active-directory-and-openldap-ntlm-kerberos-login-5-0-2-other/mitrevendor-advisory

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000