CVE-2020-35132: XSS
Published Dec 11, 2020
·Updated
An XSS issue has been discovered in phpLDAPadmin before 1.2.6.2 that allows users to store malicious values that may be executed by other users at a later time via getrequest in lib/function.php.
Affected Software
3 affected components
Phpldapadmin Project Phpldapadmin<1.2.6.2
fedoraproject fedora=32
fedoraproject fedora=33
Remediation
Event History
Dec 11, 2020
CVE Published
via MITRE·04:36 AM
Data Sourced
via MITRE·04:36 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2020-35132?
The severity of CVE-2020-35132 is classified as medium due to its potential for cross-site scripting attacks.
2
How do I fix CVE-2020-35132?
To fix CVE-2020-35132, upgrade phpLDAPadmin to version 1.2.6.2 or later.
3
What types of systems are affected by CVE-2020-35132?
CVE-2020-35132 affects phpLDAPadmin versions prior to 1.2.6.2 and Fedora versions 32 and 33.
4
What exploit can be executed due to CVE-2020-35132?
Exploitation of CVE-2020-35132 can allow attackers to inject malicious scripts that can be executed by other users.
5
When was CVE-2020-35132 disclosed?
CVE-2020-35132 was disclosed in December 2020.