CVE-2020-24660
1 advisory.
npm/lemonldap-ng-handler CVE-2020-24660: medium 6.5
Lack of URL normalization may lead to authorization bypass when URL access rules are used
Action: Upgrade lemonldap-ng-handler to 0.5.2 or later.
npm i lemonldap-ng-handler@0.5.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.5.2 | - |
Fixed versions
| 0.5.2 |
Sources
- osv: GHSA-x44x-r84w-8v67
- https://github.com/LemonLDAPNG/node-lemonldap-ng-handler/security/advisories/GHSA-x44x-r84w-8v67
- https://nvd.nist.gov/vuln/detail/CVE-2020-24660
- https://github.com/LemonLDAPNG/node-lemonldap-ng-handler/commit/136aa83ed431462fa42ce17b7f9b24e056de06be
- https://github.com/LemonLDAPNG/node-lemonldap-ng-handler
- https://github.com/LemonLDAPNG/node-lemonldap-ng-handler/releases/tag/0.5.2
- https://gitlab.ow2.org/lemonldap-ng/lemonldap-ng/-/issues/2290
- https://snyk.io/vuln/SNYK-JS-NODELEMONLDAPNGHANDLER-655999
- https://www.debian.org/security/2020/dsa-4762
- https://www.npmjs.com/package/lemonldap-ng-handler
CVE-2020-24660 · published · modified · JSON