Skip to content
OpenAdvisories
Critical · 9.8 CVE-2023-25613 EUVD-2023-0606GHSA-337f-xr2x-6fcf

LDAP Injection Vulnerability in Apache Kerby

Published Feb 20, 2023 · Updated Aug 2, 2024 · Assigned by apache

Vendor: Apache Software Foundation Product: Apache Kerby LDAP Backend Package: org.apache.kerby:ldap-backend Ecosystem: Maven

Description

An LDAP Injection vulnerability exists in the LdapIdentityBackend of Apache Kerby before 2.0.3. 

Affected products

VendorProductAffectedFixed
Apache Software Foundation Apache Kerby LDAP Backend < 2.0.3 2.0.3

Affected packages

EcosystemPackageAffectedFixedRecord
Maven org.apache.kerby:ldap-backend < 2.0.3 2.0.3 GHSA-337f-xr2x-6fcf

Advisories 1

References