Known vulnerabilities in LemonLDAP::NG

Software: LemonLDAP::NG
Software CPE: cpe:2.3:a:LemonLDAPNG:lemonldap_ng:*:*:*:*:*:*:*:*
Total vulnerabilities: 4
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 5.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting LemonLDAP::NG LemonLDAP::NG is affected by 4 known vulnerabilities: 2 medium, 2 low Critical High Medium Low

Vulnerabilities (4)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU108062 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-31510
CWE-79 Low
No
No
2.21.0 29.04.2025 SB2025042951
SB2025042953
SB2025042965
and 4 more
#VU108059 - Cross-Site Request Forgery (CSRF)
CVE-2024-52948
CWE-352 Medium
No
No
2.20.2 29.04.2025 SB2025042939
SB2025042944
SB2025042945
and 4 more
#VU100228 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Low
No
No
2.20.1 11.11.2024 SB2024111133
SB2024111139
SB2024111140
and 3 more
#VU100227 - Improper Privilege Management
CWE-269 Medium
No
No
2.20.1 11.11.2024 SB2024111133
SB2024111139
SB2024111140
and 3 more