CVE-2025-59518
Publication date 17 September 2025
Last updated 19 September 2025
Ubuntu priority
Description
In LemonLDAP::NG before 2.16.7 and 2.17 through 2.21 before 2.21.3, OS command injection can occur in the Safe jail. It does not Localize _ during rule evaluation. Thus, an administrator who can edit a rule evaluated by the Safe jail can execute commands on the server.
Status
| Package | Ubuntu Release | Status |
|---|---|---|
| lemonldap-ng | 25.10 questing |
Needs evaluation
|
| 25.04 plucky |
Needs evaluation
|
|
| 24.04 LTS noble |
Needs evaluation
|
|
| 22.04 LTS jammy |
Needs evaluation
|
|
| 20.04 LTS focal |
Needs evaluation
|
|
| 18.04 LTS bionic |
Needs evaluation
|
|
| 16.04 LTS xenial |
Needs evaluation
|
Severity score breakdown
| Parameter | Value |
|---|---|
| Base score |
8.0 · High
|
| Attack vector | Network |
| Attack complexity | High |
| Privileges required | High |
| User interaction | None |
| Scope | Changed |
| Confidentiality | High |
| Integrity impact | High |
| Availability impact | High |
| Vector | CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H |
References
Other references
- https://www.cve.org/CVERecord?id=CVE-2025-59518
- https://gitlab.ow2.org/lemonldap-ng/lemonldap-ng/-/issues/3462
- https://gitlab.ow2.org/lemonldap-ng/lemonldap-ng/-/issues/3470
- https://gitlab.ow2.org/lemonldap-ng/lemonldap-ng/-/commit/6e86f70be5499d09dfaaff307632be8a10f7e58f (v2.21.3)
- https://gitlab.ow2.org/lemonldap-ng/lemonldap-ng/-/commit/0c1ae1644bbddad34da2644228953babf137f64c (v2.21.3)
- https://gitlab.ow2.org/lemonldap-ng/lemonldap-ng/-/commit/228d01945d48015f3f9ea8a8dc64d7e6a27750e9 (v2.16.7)
- https://gitlab.ow2.org/lemonldap-ng/lemonldap-ng/-/commit/8b5ce4de7716f550d353f406b4867378c81aee7c (v2.16.7)
- https://gitlab.ow2.org/lemonldap-ng/lemonldap-ng/-/commit/228d01945d48015f3f9ea8a8dc64d7e6a27750e9
- https://gitlab.ow2.org/lemonldap-ng/lemonldap-ng/issues/3462