CVE-2023-25613

🗓️ 20 Feb 2023 15:29:39Reported by apacheType

An LDAP Injection vulnerability in Apache Kerby before 2.0.3

Reporter	Title	Published	Views	Family All 18
IBM Security Bulletins	Security Bulletin: User Behavior Analytics application add on to IBM QRadar SIEM is vulnerable to using components with known vulnerabilities	10 May 202415:38	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM CloudPak for AIOps	3 Feb 202522:29	–	ibm
IBM Security Bulletins	Security Bulletin: Common vulnerabilities addressed in Cloudera Data Platform 7.1.9 HF2	26 Mar 202503:55	–	ibm
IBM Security Bulletins	Security Bulletin: DataStage on Cloud Pak for Data is vulnerable to LDAP injection due to hbase-client	10 Mar 202515:28	–	ibm
Circl	CVE-2023-25613	20 Feb 202318:15	–	circl
CNNVD	Apache Kerby 注入漏洞	20 Feb 202300:00	–	cnnvd
CNVD	Apache Kerby LDAP Injection Vulnerability	22 Feb 202300:00	–	cnvd
Cvelist	CVE-2023-25613 LDAP Injection Vulnerability in Apache Kerby	20 Feb 202315:29	–	cvelist
Github Security Blog	Apache Kerby LdapIdentityBackend LDAP Injection vulnerability	20 Feb 202318:30	–	github
NCSC	Vulnerabilities fixed in Oracle Communications	19 Apr 202300:00	–	ncsc

NVD

Vulners

Node

apache kerby_ldap_backendRange<2.0.3

[
  {
    "collectionURL": "https://repo.maven.apache.org/maven2",
    "defaultStatus": "unaffected",
    "packageName": "org.apache.kerby:ldap-backend",
    "product": "Apache Kerby LDAP Backend",
    "vendor": "Apache Software Foundation",
    "versions": [
      {
        "lessThan": "2.0.3",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  }
]

Source	Link
lists	www.lists.apache.org/thread/ynz3hhbbq6d980fzpncwbh5jd8mkyt5y

11 Aug 2025 14:24Current

9.6High risk

Vulners AI Score9.6

CVSS 3.19.8

EPSS0.00213

CWE-74