Skip to content
Threat Feed
Subscribe

Product

OpenDJ <= 5.1.1

1 brief RSS
critical advisory

OpenDJ DSMLv2 Gateway Vulnerability Allows Unauthenticated SSRF, Local File Read, and DoS

A remote, unauthenticated attacker can exploit a critical vulnerability in the DSMLv2 SOAP gateway (opendj-dsml-servlet) of OpenIdentityPlatform OpenDJ versions up to 5.1.1, allowing server-side request forgery (SSRF), local file reading via `file:` URIs, and denial-of-service (DoS) due to unbounded response reads by submitting specially crafted DSML add/modify requests.

OpenDJ <= 5.1.1 ssrf file-read denial-of-service web-application unauthenticated
4t