Skip to content
OpenAdvisories

Vendor

opsre

2 known vulnerabilities.

Products

go-ldap-admin 2
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.9
    CVE-2026-111347

    go-ldap-admin through 0.6.2 Hard-Coded RSA Private Key via /base/decryptpwd

    go-ldap-admin through 0.6.2 embeds a hard-coded RSA private key, published in the public repository, that protects encrypted login passwords. Unauthenticated attackers who capture encrypted passwords can decrypt them offline or via the /base/decryptpwd endpoi…

    opsre go-ldap-admin
  • Medium 5.6
    CVE-2025-13948

    opsre go-ldap-admin JWT docker-compose.yaml hard-coded key

    A vulnerability was determined in opsre go-ldap-admin up to 20251011. This issue affects some unknown processing of the file docs/docker-compose/docker-compose.yaml of the component JWT Handler. Executing manipulation of the argument secret key can lead to us…

    opsre go-ldap-admin