CVE-2020-35132

Katalog CVE

CVSS 5.4 · Medium EPSS 1,3%

Kerentanan Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') pada phpldapadmin project phpldapadmin, fedoraproject fedora. Skor CVSS 3.1 5.4 (Medium) menurut NVD.

Deskripsi (NVD)

An XSS issue has been discovered in phpLDAPadmin before 1.2.6.2 that allows users to store malicious values that may be executed by other users at a later time via get_request in lib/function.php.

Rincian

Terbit di NVD

11 Desember 2020

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

5.4 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

EPSS (30 hari)

1,3% peluang dieksploitasi; lebih tinggi dari 68,6% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/leenooks/phpLDAPadmin/commit/c87571f6b7be15d5cd8b26381b6eb31ad03d28e2 patch · advisory pihak ketiga
• https://github.com/leenooks/phpLDAPadmin/compare/1.2.5...1.2.6.2 patch · advisory pihak ketiga
• https://bugs.launchpad.net/ubuntu/+source/phpldapadmin/+bug/1906474 issue tracking · advisory pihak ketiga
• https://github.com/leenooks/phpLDAPadmin/issues/130 exploit · issue tracking · advisory pihak ketiga
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6XA42XDSUPCOX...
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W6PZH3EY2T66N...