CVE-2018-8763: XSS
Roland Gruber Softwareentwicklung LDAP Account Manager before 6.3 has XSS via the dn parameter to the templates/3rdParty/pla/htdocs/cmd.php URI or the template parameter to the templates/3rdParty/pla/htdocs/cmd.php?cmd=renameform URI.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/ldap-account-managerto a version that resolves this vulnerability.Fixed in 8.0.1-0+deb11u1Fixed in 8.3-1
Event History
Frequently Asked Questions
What is the severity of CVE-2018-8763?
CVE-2018-8763 has a moderate severity due to the potential for cross-site scripting (XSS) vulnerabilities.
How do I fix CVE-2018-8763?
To fix CVE-2018-8763, update the LDAP Account Manager to version 6.3 or newer.
Which versions of LDAP Account Manager are affected by CVE-2018-8763?
CVE-2018-8763 affects versions of LDAP Account Manager below 6.3.
Can CVE-2018-8763 be exploited remotely?
Yes, CVE-2018-8763 can be exploited remotely through crafted requests containing malicious parameters.
What kind of security issue is CVE-2018-8763?
CVE-2018-8763 is a cross-site scripting (XSS) vulnerability that can lead to security breaches.