{"uuid": "9aa579cb-be14-4a74-9427-91defcc2ccd5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "name": "PoC LDAPNightmare: The CVE Mix-Up (as noted by @wdormann@infosec.exchange)", "description": "A PoC for CVE-2024-49113 titled \u201cWindows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability.\u201d is provided by SafeBreach.\n\nHowever, there was confusion between CVE-2024-49113 (DoS) and CVE-2024-49112 (RCE - CVSS 9.8), as noted by @wdormann@infosec.exchange:\n\nhttps://github.com/SafeBreach-Labs/CVE-2024-49113/commit/eb76381b2927ce78c86743267d898b4ebfcbb187", "creation_timestamp": "2025-01-02T22:00:01.220523+00:00", "timestamp": "2025-01-02T22:04:08.366908+00:00", "related_vulnerabilities": ["CVE-2024-49113", "CVE-2024-49112"], "meta": [{"ref": ["https://www.safebreach.com/blog/ldapnightmare-safebreach-labs-publishes-first-proof-of-concept-exploit-for-cve-2024-49113/", "https://infosec.exchange/@wdormann/113760656970284159", "https://infosec.exchange/@wdormann/113760610915798924", "https://github.com/SafeBreach-Labs/CVE-2024-49113"]}], "author": {"login": "cedric", "name": "C\u00e9dric Bonhomme", "uuid": "af0120d0-3dac-4a6a-974b-a9f33d2a9846"}}
