CVE-2020-5281 in Perun

الملخص

بحسب MITRE

In Perun before version 3.9.1, VO or group manager can modify configuration of the LDAP extSource to retrieve all from Perun LDAP. Issue is fixed in version 3.9.1 by sanitisation of the input.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

• مسؤول: GitHub, Inc.
• حجز: 02/01/2020
• الاعتدال: تمت الموافقة
• إدخال: VDB-152341
• CPE: جاهز
• CWE: CWE-90 (مؤكد)
• CVSS: 6.2 (NVD)
• EPSS: 0.01328
• KEV: لا
• النشاطات: منخفض جدًا

المصادر

• MITRE: https://www.cve.org/CVERecord?id=CVE-2020-5281
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2020-5281
• CVE Details: https://www.cvedetails.com/cve/CVE-2020-5281/