LDAP Tool Box Self Service Password vulnerabilities
1 known vulnerability in LDAP Tool Box Self Service Password from Ltb-project. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
1vulnerabilities
0critical
1high
0exploited
7.5average CVSS score
Latest first
- 7.5 High severity
LDAP Tool Box Self Service Password: Weak Password Recovery Mechanism for Forgotten Password
LDAP Tool Box Self Service Password 1.5.2 contains a password reset vulnerability that allows attackers to manipulate HTTP Host headers during token generation. Attackers can craft malicious password reset requests that generate tokens sent to a controlled ser