Lucene search
+L

4 matches found

RedhatCVE
RedhatCVE
•added 2025/05/23 4:26 a.m.•24 views

CVE-2023-44038

In VeridiumID before 3.5.0, the identity provider page allows an unauthenticated attacker to discover information about registered users via an LDAP injection attack...

6.5CVSS7AI score0.00312EPSS
SaveExploits0
OSV
OSV
•added 2024/04/03 5:15 p.m.•17 views

CVE-2023-44038

In VeridiumID before 3.5.0, the identity provider page allows an unauthenticated attacker to discover information about registered users via an LDAP injection attack...

6.5CVSS5.8AI score0.00312EPSS
SaveExploits0References2
CVE
CVE
•added 2024/04/03 12:00 a.m.•83 views

CVE-2023-44038

VeridiumID versions prior to 3.5.0 are vulnerable to an LDAP injection attack on the identity provider page . This flaw allows an unauthenticated attacker to discover information about registered users. To resolve this issue, it is recommended to update to version 3.5.0 or later . Specific exploi...

6.5CVSS6.9AI score0.00312EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2024/04/03 12:00 a.m.•35 views

CVE-2023-44038

In VeridiumID before 3.5.0, the identity provider page allows an unauthenticated attacker to discover information about registered users via an LDAP injection attack...

6.9AI score0.00312EPSS
SaveExploits0References2
Rows per page
Query Builder