High severity7.5OSV Advisory· Published May 19, 2024· Updated Jun 17, 2026

CVE-2024-36070

Description

tine before 2023.11.8, when an LDAP backend is used, allows anonymous remote attackers to obtain sensitive authentication information via setup.php because of getRegistryData in Setup/Frontend/Json.php. (An update is also available for the 2022.11 series.)

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Tine Groupware/TineOSV
Range: 2023.11.1, 2023.11.1-beta4, 2023.11.1-beta5, …
Tine/tinellm-fuzzy
Range: <2023.11.8

Patches

Vulnerability mechanics

References

github.com/tine-groupware/tine/commit/5d556a1225aa358cbf7cfbeae518c9386b46f516nvd
github.com/tine-groupware/tine/releases/tag/2023.11.8nvd

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.000
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000