Linux Distros Unpatched Vulnerability : CVE-2020-24660

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in LemonLDAP::NG through 2.0.8, when NGINX is used. An attacker may bypass URL- based access control to protected Virtual Hosts by...

Authorization Bypass

lemonldap-ng-handler is vulnerable to authorization bypass. The bypass is possible due to the lack of correct enforcement of regexp-based URL access rules, allowing an attacker to bypass the filtering system using certain URL encodings...

node-lemonldap-ng-handler (=0.4.0) potentially affected by CVE-2020-24660 via lemonldap-ng-handler (=0.4.0)

lemonldap-ng-handler NPM version =0.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on lemonldap-ng-handler and may be impacted: - node-lemonldap-ng-handler =0.4.0 Source cves: CVE-2020-24660 Source advisory: OSV:GHSA-X44X-R84W-8V67...