← CVE Intelligence

CVE-2025-31510

lemonldap-ng / LemonLDAP::NG PUBLISHED

Description (CNA)

In the portal in LemonLDAP::NG before 2.21.0, cross-site scripting (XSS) allows remote attackers to inject arbitrary web script or HTML (into the login page) via the tab parameter, for Choice authentication.

Affected (CNA)

Vendor / productVersions
lemonldap-ng / LemonLDAP::NGaffected 2.0.8 before 2.16.5; affected 2.17.0 before 2.21.0

CWE

CWE-79

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.