Description
In VeridiumID before 3.5.0, the identity provider page allows an unauthenticated attacker to discover information about registered users via an LDAP injection attack.
Medium · 6.5
CVE-2023-44038
EUVD-2023-48397GHSA-wmr5-hhc3-fqcx
In VeridiumID before 3.5.0, the identity provider page allows an unauthenticated attacker to discover information about registered users vi…
Published Apr 3, 2024 · Updated Nov 1, 2024 · Assigned by mitre