Unrated severityNVD Advisory· Published Sep 29, 2023· Updated Sep 23, 2024

CVE-2023-44469

Description

A Server-Side Request Forgery issue in the OpenID Connect Issuer in LemonLDAP::NG before 2.17.1 allows authenticated remote attackers to send GET requests to arbitrary URLs through the request_uri authorization parameter. This is similar to CVE-2020-10770.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

LemonLDAP::NG/LemonLDAP::NGdescription
Lemonldap Ng/Lemonldap Ngllm-fuzzy
Range: <2.17.1

Patches

Vulnerability mechanics

References

lists.debian.org/debian-lts-announce/2023/10/msg00014.htmlmitremailing-list
gitlab.ow2.org/lemonldap-ng/lemonldap-ng/-/issues/2998mitre
gitlab.ow2.org/lemonldap-ng/lemonldap-ng/-/releases/v2.17.1mitre
security.lauritz-holtmann.de/post/sso-security-ssrf/mitre

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000