Unrated severityNVD Advisory· Published Oct 9, 2024· Updated Nov 3, 2025

CVE-2024-48933

Description

A cross-site scripting (XSS) vulnerability in LemonLDAP::NG before 2.19.3 allows remote attackers to inject arbitrary web script or HTML into the login page via a username if userControl has been set to a non-default value that allows special HTML characters.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

LemonLDAP::NG/LemonLDAP::NGdescription
Lemonldap Ng/Lemonldap Ngllm-fuzzy
Range: < 2.19.3

Patches

Vulnerability mechanics

References

gitlab.ow2.org/lemonldap-ng/lemonldap-ng/-/issues/3232mitre

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000