ELA-502-1 phpldapadmin security update

cross-site scripting

2021-10-25
Packagephpldapadmin
Version1.2.2-5.2+deb8u2
Related CVEs CVE-2020-35132


An XSS security vulnerability has been discovered in phpLDAPadmin, a web based interface for administering LDAP servers, that allows users to store malicious values that may be executed by other users at a later time.



For Debian 8 jessie, these problems have been fixed in version 1.2.2-5.2+deb8u2.

We recommend that you upgrade your phpldapadmin packages.

Further information about Extended LTS security advisories can be found in the dedicated section of our website.