Security Advisory

CVE-2023-44469

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2023-09-29 00:00:00

Last updated 2024-09-23 16:32:58

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

A Server-Side Request Forgery issue in the OpenID Connect Issuer in LemonLDAP::NG before 2.17.1 allows authenticated remote attackers to send GET requests to arbitrary URLs through the request_uri authorization parameter. This is similar to CVE-2020-10770.

← Browse all CVEs View on cve.org ↗