lemonldap-ng vulnerabilities

Direct Vulnerabilities

Known vulnerabilities in the lemonldap-ng package. This does not include vulnerabilities belonging to this package’s dependencies.

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.

Vulnerability	Vulnerable Version
M Server-Side Request Forgery (SSRF)	<2.0.2+ds-7+deb10u10
C Improper Authentication	<2.0.2+ds-7+deb10u9
M Insufficient Session Expiration	<2.0.2+ds-7+deb10u8
C Improper Authentication	<2.0.2+ds-7+deb10u7
H Improper Restriction of Excessive Authentication Attempts	<2.0.2+ds-7+deb10u6
C Direct Request ('Forced Browsing')	<2.0.2+ds-7+deb10u5
H Improper Certificate Validation	<2.0.2+ds-7+deb10u8
C CVE-2019-19791	<2.0.2+ds-7+deb10u3
C Incorrect Authorization	<2.0.2+ds-7+deb10u2
H XML External Entity (XXE) Injection	<2.0.0+ds-1
C Insufficiently Protected Credentials	<2.0.2+ds-7+deb10u1
H Access Restriction Bypass	<1.2.2-3