PyPI/ldapcherry CVE-2019-25095: unknown, EPSS 0.57%
A vulnerability, which was classified as problematic, was found in kakwa LdapCherry up to 0.x. Affected is an unknown function of the component URL Handler. The manipulation leads to cross site script
Action: Upgrade ldapcherry to 1.0.0 or later.
pip install ldapcherry==1.0.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.0.0 | - |
Fixed versions
| 1.0.0 |
Sources
- osv: PYSEC-2023-19
- https://github.com/kakwa/ldapcherry/pull/16
- https://vuldb.com/?ctiid.217434
- https://github.com/kakwa/ldapcherry/commit/6f98076281e9452fdb1adcd1bcbb70a6f968ade9
- https://github.com/kakwa/ldapcherry/releases/tag/1.0.0
- https://vuldb.com/?id.217434
- https://github.com/advisories/GHSA-vq8w-x8v7-f88m
CVE-2019-25095 · published · modified · JSON