https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 19 Oct 2026 03:38:48 +0000 https://cve.radiocsirt.org/vuln/bdu:2019-04703 bdu:2019-04703 https://cve.radiocsirt.org/vuln/bdu:2019-04703 https://cve.radiocsirt.org/vuln/euvd-2026-57447 EUVD-2026-57447 https://cve.radiocsirt.org/vuln/euvd-2026-57447 https://cve.radiocsirt.org/vuln/fkie_cve-2019-15941 <p>OpenID Connect Issuer in LemonLDAP::NG 2.x through 2.0.5 may allow an attacker to bypass access control rules via a crafted OpenID Connect authorization request. To be vulnerable, there must exist an OIDC Relaying party within the LemonLDAP configuration with weaker access control rules than the target RP, and no filtering on redirection URIs.</p> <p>OpenID Connect Issuer in LemonLDAP::NG 2.x through 2.0.5 may allow an attacker to bypass access control rules via a crafted OpenID Connect authorization request. To be vulnerable, there must exist an OIDC Relaying party within the LemonLDAP configuration with weaker access control rules than the target RP, and no filtering on redirection URIs.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2019-15941 https://cve.radiocsirt.org/vuln/ghsa-jq88-5p5w-x8c3 <p>OpenID Connect Issuer in LemonLDAP::NG 2.x through 2.0.5 may allow an attacker to bypass access control rules via a crafted OpenID Connect authorization request. To be vulnerable, there must exist an OIDC Relaying party within the LemonLDAP configuration with weaker access control rules than the target RP, and no filtering on redirection URIs.</p> <p>OpenID Connect Issuer in LemonLDAP::NG 2.x through 2.0.5 may allow an attacker to bypass access control rules via a crafted OpenID Connect authorization request. To be vulnerable, there must exist an OIDC Relaying party within the LemonLDAP configuration with weaker access control rules than the target RP, and no filtering on redirection URIs.</p> https://cve.radiocsirt.org/vuln/ghsa-jq88-5p5w-x8c3 https://cve.radiocsirt.org/vuln/gsd-2019-15941 gsd-2019-15941 https://cve.radiocsirt.org/vuln/gsd-2019-15941 https://cve.radiocsirt.org/vuln/ubuntu-cve-2019-15941 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: lemonldap-ng, Ubuntu:18.04:LTS: lemonldap-ng</p> <p>OpenID Connect Issuer in LemonLDAP::NG 2.x through 2.0.5 may allow an attacker to bypass access control rules via a crafted OpenID Connect authorization request. To be vulnerable, there must exist an OIDC Relaying party within the LemonLDAP configuration with weaker access control rules than the target RP, and no filtering on redirection URIs.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: lemonldap-ng, Ubuntu:18.04:LTS: lemonldap-ng</p> <p>OpenID Connect Issuer in LemonLDAP::NG 2.x through 2.0.5 may allow an attacker to bypass access control rules via a crafted OpenID Connect authorization request. To be vulnerable, there must exist an OIDC Relaying party within the LemonLDAP configuration with weaker access control rules than the target RP, and no filtering on redirection URIs.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2019-15941