CVE-2026-12804: Open Redirect in lemonldap-ng
A vulnerability was detected in lemonldap-ng up to 2.23.0. Impacted is an unknown function in the library lemonldap-ng-portal/lib/Lemonldap/NG/Portal/CDC.pm of the component SAML Common Domain Cookie Endpoint. Performing a manipulation of the argument url results in open redirect. The attack is possible to be carried out remotely. The exploit is now public and may be used. Applying a patch is the recommended action to fix this issue. The vendor confirms, that "it has been fixed some days ago and will be available in 2.23.1. CDC is quite never used, so the impact is very low."
AI Analysis
Technical Summary
CVE-2026-12804 is an open redirect vulnerability in lemonldap-ng affecting versions up to 2.23.0. The vulnerability is located in the lemonldap-ng-portal/lib/Lemonldap/NG/Portal/CDC.pm file within the SAML Common Domain Cookie Endpoint component. By manipulating the 'url' argument, an attacker can cause the application to redirect users to arbitrary external URLs. This vulnerability can be exploited remotely without authentication. The vendor has addressed the issue in version 2.23.1, noting that the affected component is infrequently used, which reduces the overall impact.
Potential Impact
Successful exploitation allows an attacker to redirect users to arbitrary URLs, which can facilitate phishing or other social engineering attacks. However, the affected component is rarely used, which limits the practical impact. There is no indication of further compromise or privilege escalation from this vulnerability.
Mitigation Recommendations
A patch has been released by the vendor in lemonldap-ng version 2.23.1 to fix this open redirect vulnerability. Users should upgrade to version 2.23.1 or later to remediate the issue. Since the vendor confirms the fix is available and the component is rarely used, applying the official update is the recommended action.
CVE-2026-12804: Open Redirect in lemonldap-ng
Description
A vulnerability was detected in lemonldap-ng up to 2.23.0. Impacted is an unknown function in the library lemonldap-ng-portal/lib/Lemonldap/NG/Portal/CDC.pm of the component SAML Common Domain Cookie Endpoint. Performing a manipulation of the argument url results in open redirect. The attack is possible to be carried out remotely. The exploit is now public and may be used. Applying a patch is the recommended action to fix this issue. The vendor confirms, that "it has been fixed some days ago and will be available in 2.23.1. CDC is quite never used, so the impact is very low."
CVSS v4.0
Score 5.3medium
Affected software
pkg:github/lemonldap-ng/lemonldap-ngcpe:2.3:a:lemonldap-ng:lemonldap-ng:*:*:*:*:*:*:*:*Run on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2026-12804 is an open redirect vulnerability in lemonldap-ng affecting versions up to 2.23.0. The vulnerability is located in the lemonldap-ng-portal/lib/Lemonldap/NG/Portal/CDC.pm file within the SAML Common Domain Cookie Endpoint component. By manipulating the 'url' argument, an attacker can cause the application to redirect users to arbitrary external URLs. This vulnerability can be exploited remotely without authentication. The vendor has addressed the issue in version 2.23.1, noting that the affected component is infrequently used, which reduces the overall impact.
Potential Impact
Successful exploitation allows an attacker to redirect users to arbitrary URLs, which can facilitate phishing or other social engineering attacks. However, the affected component is rarely used, which limits the practical impact. There is no indication of further compromise or privilege escalation from this vulnerability.
Mitigation Recommendations
A patch has been released by the vendor in lemonldap-ng version 2.23.1 to fix this open redirect vulnerability. Users should upgrade to version 2.23.1 or later to remediate the issue. Since the vendor confirms the fix is available and the component is rarely used, applying the official update is the recommended action.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- VulDB
- Date Reserved
- 2026-06-21T04:09:21.573Z
- Cvss Version
- 4.0
- State
- PUBLISHED
- Remediation Level
- null
Threat ID: 6a383a5ceed863c81e3de787
Added to database: 06/21/2026, 19:24:12 UTC
Last enriched: 06/28/2026, 21:52:59 UTC
Last updated: 08/04/2026, 13:13:50 UTC
Views: 72
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.