LE
Product
lemonldap-ng
14
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 6High 3Medium 4Low 0
Watch
Add lemonldap-ng to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-35472 | 8.8 | Jul 30 | An issue was discovered in LemonLDAP::NG before 2.0.12 Affected: through 2.0.11 |
| CVE-2020-16093 | 7.5 | Jul 18 | In LemonLDAP::NG (aka lemonldap-ng) through 2.0.8, validity of the X.509 certificate is not checked by default when connecting to remote LDAP backends, because the default… Affected: through 2.0.8 |
| CVE-2025-31510 | 7.2 | Jan 16 | In the portal in LemonLDAP::NG before 2.21.0, cross-site scripting (XSS) allows remote attackers to inject arbitrary web script or HTML (into the login page) via the tab… Affected: 2.0.8 before 2.16.5; 2.17.0 before 2.21.0 |
Showing 3