PyPI/ldapcherry CVE-2019-25095: medium 6.1, EPSS 0.59%

LdapCherry Cross-site Scripting vulnerbaility

Action: Upgrade ldapcherry to 1.0.0 or later.

pip install ldapcherry==1.0.0

Affected

Fixed versions

Sources

• osv: GHSA-vq8w-x8v7-f88m
• https://nvd.nist.gov/vuln/detail/CVE-2019-25095
• https://github.com/kakwa/ldapcherry/pull/16
• https://github.com/kakwa/ldapcherry/commit/6f98076281e9452fdb1adcd1bcbb70a6f968ade9
• https://github.com/kakwa/ldapcherry
• https://github.com/kakwa/ldapcherry/releases/tag/1.0.0
• https://github.com/pypa/advisory-database/tree/main/vulns/ldapcherry/PYSEC-2023-19.yaml
• https://vuldb.com/?ctiid.217434
• https://vuldb.com/?id.217434

CVE-2019-25095 · published 2023-01-05T09:30:28Z · modified 2024-09-27T22:05:07.232424Z · JSON