CVE-2023-25613

An LDAP Injection vulnerability exists in the LdapIdentityBackend of Apache Kerby before 2.0.3. 

Score

CVSS 3.1 9.8 Critical

Status

Analyzed - security@apache.org

Published

2023-02-20

Last modified

2024-08-02

Weaknesses

CWE-74

Affected products

• Kerby Ldap Backend (Apache)
• Apache Kerby Ldap Backend (Apache Software Foundation)

References

• https://lists.apache.org/thread/ynz3hhbbq6d980fzpncwbh5jd8mkyt5y