CVE-2023-25613

CVE-2023-25613: LDAP Injection Vulnerability in Apache Kerby

Vendor Apache Software Foundation

Product Apache Kerby LDAP Backend

Weakness CWE-74

Published February 20, 2023

Last update August 2, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

An LDAP Injection vulnerability exists in the LdapIdentityBackend of Apache Kerby before 2.0.3.

Key dates

02Disclosure timeline

February 20, 2023 CVE published

August 2, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2023-25613 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/74.html AskarLabs — CWE-74 write-up Improper Neutralization of Special Elements in Output ('Injection')

Related vulnerabilities

04Related CVE

CVE-2026-5797 Quiz and Survey Master (QSM) <= 11.1.0 - Unauthenticated Shortcode Injection Leading to Arbitrary Quiz Result Disclosure via Quiz Answer Text Input Fields CVE-2023-6164 MainWP Dashboard <= 4.5.1.2 - Authenticated(Administrator+) CSS Injection CVE-2024-35728 WordPress Product Addons & Fields for WooCommerce plugin <= 32.0.20 - Content Injection vulnerability CVE-2022-21663 Authenticated Object Injection in Multisites in WordPress CVE-2024-37253 WordPress WPDirectoryKit plugin <= 1.3.6 - HTML Injection vulnerability