Approved changes feed: RSS · Atom

cpe:2.3:a:ttrrs-auth-ldap_project:ttrrs-auth-ldap:0.5:rc2:*:*:*:*:*:*

part: a version: 0.5 update: rc2

VendorTtrrs Auth Ldap Project (9bf04f35-b099-58ea-bb7a-78885f8d1dd4)
ProductTtrrs Auth Ldap (64960c8f-7544-5e98-a856-8a01cb5645d0)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/hydrian/ttrss-auth-ldap purl2cpe 2026-06-01 10:15:31.794012

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2015-10027 vulnerable 2026-06-08 05:06:24.529202 hydrian TTRSS-Auth-LDAP Username ldap injection
MEDIUM (5.5)
A vulnerability, which was classified as problematic, has been found in hydrian TTRSS-Auth-LDAP. Affected by this issue is some unknown functionality of the component Username Handler. The manipulation leads to ldap injection. Upgrading to version 2.0b1 is able to address this issue. The patch is identified as a7f7a5a82d9202a5c40d606a5c519ba61b224eb8. It is recommended to upgrade the affected component. VDB-217622 is the identifier assigned to this vulnerability.
Published: 2023-01-07T16:42:32.233Z
Updated: 2024-08-06T08:58:26.394Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.