Lucene search
Ubuntu.comUB:CVE-2023-44469HistorySep 29, 2023 - 12:00 a.m.
CVE-2023-44469
2023-09-2900:00:00
ubuntu.com
ubuntu.com
9
ssrf lemonldap::ng openid connect_unix_authentication parameter-cve-2023-44469-cve-2020-10770
0.001 Low
EPSS
Percentile
22.6%
A Server-Side Request Forgery issue in the OpenID Connect Issuer in
LemonLDAP::NG before 2.17.1 allows authenticated remote attackers to send
GET requests to arbitrary URLs through the request_uri authorization
parameter. This is similar to CVE-2020-10770.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| ubuntu | 18.04 | noarch | lemonldap-ng | <Â any | UNKNOWN |
| ubuntu | 20.04 | noarch | lemonldap-ng | <Â any | UNKNOWN |
| ubuntu | 22.04 | noarch | lemonldap-ng | <Â any | UNKNOWN |
| ubuntu | 23.10 | noarch | lemonldap-ng | <Â any | UNKNOWN |
| ubuntu | 24.04 | noarch | lemonldap-ng | <Â any | UNKNOWN |
| ubuntu | 16.04 | noarch | lemonldap-ng | <Â any | UNKNOWN |
References
gitlab.ow2.org/lemonldap-ng/lemonldap-ng/-/issues/2998
gitlab.ow2.org/lemonldap-ng/lemonldap-ng/-/releases/v2.17.1
launchpad.net/bugs/cve/CVE-2023-44469
nvd.nist.gov/vuln/detail/CVE-2023-44469
security-tracker.debian.org/tracker/CVE-2023-44469
security.lauritz-holtmann.de/post/sso-security-ssrf/
www.cve.org/CVERecord?id=CVE-2023-44469
Related
debiancve
debiancve
CVE-2023-44469
2023-09-29 07:15:14
cvelist
cvelist
CVE-2023-44469
2023-09-29 00:00:00
CVE-2020-10770
2020-12-15 00:00:00
cve
cve
CVE-2023-44469
2023-09-29 07:15:14
CVE-2020-10770
2020-12-15 20:15:00
osv
osv
CVE-2023-44469
2023-09-29 07:15:14
lemonldap-ng - security update
2023-10-08 00:00:00
Keycloak vulnerable to Server-Side Request Forgery
2022-05-24 17:36:27
nessus
nessus
prion
prion
Server side request forgery (ssrf)
2023-09-29 07:15:00
Server side request forgery (ssrf)
2020-12-15 20:15:00
veracode
veracode
Server-Side Request Forgery (SSRF)
2023-10-08 23:52:34
Server-Side Request Forgery (SSRF)
2021-02-03 08:49:37
githubexploit
githubexploit
Exploit for Server-Side Request Forgery in Redhat Keycloak
2021-10-13 08:40:33
redhat
redhat
redhatcve
redhatcve
CVE-2020-10770
2020-11-26 06:51:31
debian
debian
[SECURITY] [DLA 3612-1] lemonldap-ng security update
2023-10-08 16:51:55
zdt
zdt
nuclei
nuclei
Keycloak <= 12.0.1 - request_uri Blind Server-Side Request Forgery (SSRF)
2021-10-17 15:59:45
github
github
Keycloak vulnerable to Server-Side Request Forgery
2022-05-24 17:36:27
packetstorm
packetstorm
Keycloak 12.0.1 Server-Side Request Forgery
2021-10-13 00:00:00
openvas
openvas
Debian: Security Advisory (DLA-3612-1)
2023-10-09 00:00:00
exploitdb
exploitdb
qualysblog
qualysblog
Identify Server-Side Attacks Using Qualys Periscope
2022-12-01 23:11:35