CVE-2023-44469

A Server-Side Request Forgery issue in the OpenID Connect Issuer in LemonLDAP::NG before 2.17.1 allows authenticated remote attackers to send GET requests to…

published September 29, 2023

CVSS
—
EPSS
1%
Percentile
54.3
In the wild
Unconfirmed
What it is

A Server-Side Request Forgery issue in the OpenID Connect Issuer in LemonLDAP::NG before 2.17.1 allows authenticated remote attackers to send GET requests to arbitrary URLs through the request_uri authorization parameter. This is similar to CVE-2020-10770.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00747 · 54.3th percentile
Published
2023-09-29T00:00Z
EPSS history
Timeline
  • 29 SEP 00:00Z
    A Server-Side Request Forgery issue in the OpenID Connect Issuer in LemonLDAP::NG before 2.17.1 allows authenticated remote attackers to send GET requests to…
    cvelistv5