PT-2025-2944 · Debian · Debian

Published 2024-01-01 · Updated 2025-09-24 · CVE-2024-52948

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions No specific software or versions mentioned.

Description The issue concerns a CSRF (Cross-Site Request Forgery) on 2FA (Two-Factor Authentication) registration.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2024-52948

Affected Products

Debian

References · 11

• https://osv.dev/vulnerability/UBUNTU-CVE-2024-52948 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-52948 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2024-52948 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2024-52948 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2024-52948 · Security Note
• https://gitlab.ow2.org/lemonldap-ng/lemonldap-ng/-/commit/dfe9ddc40de982a33fbff42a143ccd1b786de775 · Note
• https://gitlab.ow2.org/lemonldap-ng/lemonldap-ng/-/commit/0e69ee17ee7e78569a6f7a3c859105e958d374d4 · Note
• https://gitlab.ow2.org/lemonldap-ng/lemonldap-ng/-/issues/3258 · Note
• https://gitlab.ow2.org/lemonldap-ng/lemonldap-ng/-/commit/9923ed4479b3c71549f9a9660f77dc03331eac30 · Note
• https://reddit.com/r/Operatingsystems/comments/1jcy1dr/debian_12100_released · Reddit Post
• https://gitlab.ow2.org/lemonldap-ng/lemonldap-ng/-/commit/d65bd9cb8e9a620f71214d87e937747d7b415999 · Note