CVE-2025-59518
In LemonLDAP::NG before 2.16.7 and 2.17 through 2.21 before 2.21.3, OS command injection can occur in the Safe jail. It does not Localize _ during rul...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
In LemonLDAP::NG before 2.16.7 and 2.17 through 2.21 before 2.21.3, OS command injection can occur in the Safe jail. It does not Localize _ during rule evaluation. Thus, an administrator who can edit a rule evaluated by the Safe jail can execute commands on the server.
État des correctifs par distribution
Paquets corrigés publiés par chaque distribution pour cette CVE
- Debian DEBIAN-CVE-2025-59518 lemonldap-ng Corrigé dans: 2.0.11+ds-4+deb11u8
- Ubuntu UBUNTU-CVE-2025-59518 lemonldap-ng
Références
- advisory github.com
- advisory nvd.nist.gov
- patch gitlab.ow2.org
- report gitlab.ow2.org