high8.0
CVE-2025-59518
In LemonLDAP::NG before 2.16.7 and 2.17 through 2.21 before 2.21.3, OS command injection can occur in the Safe jail.
Impact
In LemonLDAP::NG before 2.16.7 and 2.17 through 2.21 before 2.21.3, OS command injection can occur in the Safe jail. It does not Localize _ during rule evaluation. Thus, an administrator who can edit a rule evaluated by the Safe jail can execute commands on the server.
Affected products
| Product | Affected versions |
|---|---|
| LemonLDAP::NG | before 2.16.7 |
| 2.17 | through 2.21 |
Versions were read from the advisory text. No structured product data has been published for this record yet.