Ltb-project vulnerabilities
We track 2 vulnerabilities in Ltb-project products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on December 19, 2025.
2vulnerabilities
1critical
1high
0exploited
8.7average CVSS score
Latest Ltb-project vulnerabilities
- 7.5 High severity
LDAP Tool Box Self Service Password: Weak Password Recovery Mechanism for Forgotten Password
LDAP Tool Box Self Service Password 1.5.2 contains a password reset vulnerability that allows attackers to manipulate HTTP Host headers during token generation. Attackers can craft malicious password reset requests that generate tokens sent to a controlled ser
- 9.8 Critical severity
Self Service Password: Improper Control of Generation of Code
An issue in LTB Self Service Password before v.1.5.4 allows a remote attacker to execute arbitrary code and obtain sensitive information via hijack of the SMS verification code function to arbitrary phone.