CVE-2018-8763
CVE-2018-8763
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Roland Gruber Softwareentwicklung LDAP Account Manager before 6.3 has XSS via the dn parameter to the templates/3rdParty/pla/htdocs/cmd.php URI or the template parameter to the templates/3rdParty/pla/htdocs/cmd.php?cmd=rename_form URI.
CVSS 6.1 · Medium · EPSS 1.5% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
ldap-account-manager Debian:12
- Affected ranges
- ECOSYSTEM: < 6.3-1
Update to 6.3-1
ldap-account-manager Debian:13
- Affected ranges
- ECOSYSTEM: < 6.3-1
Update to 6.3-1
ldap-account-manager Debian:14
- Affected ranges
- ECOSYSTEM: < 6.3-1
Update to 6.3-1
ldap-account-manager Ubuntu:16.04:LTS
- Versions
- 4.9-1
- 5.1-1
- 5.2-1
- 5.2-1ubuntu1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
ldap-account-manager Ubuntu:18.04:LTS
- Versions
- 5.7-1
- 6.1-1
- 6.2-1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published