Main
Vulnerability Database
Exploits
ID:12022 - Exploit for Improper Encoding or Escaping of Output in python-ldap - CVE-2025-61912
ID:12022 - Exploit for Improper Encoding or Escaping of Output in python-ldap - CVE-2025-61912
Published: October 13, 2025
Vulnerability identifier: #VU116910
Vulnerability risk: Medium
CVE-ID: CVE-2025-61912
CWE-ID: CWE-116
Exploitation vector: Remote access
Vulnerable software:
python-ldap
python-ldap
Link to public exploit:
Vulnerability description
The vulnerability allows a remote attacker to compromise the target system.
The vulnerability exists due to improper encoding or escaping of output in the "ldap.dn.escape_dn_chars()" function. A remote attacker can perform a denial of service (DoS) attack.
Remediation
Install updates from vendor's website.