Junglewise Threat Intelligence

CVE-2023-33201: Bouncy Castle For Java LDAP injection vulnerability

CVE-2023-33201 · Severity: low · CVSS 3.1 · Published 2023-07-05

Technologies: org.bouncycastle:bcprov-jdk14 (Maven), org.bouncycastle:bcprov-ext-jdk15on (Maven), org.bouncycastle:bcprov-jdk18on (Maven), org.bouncycastle:bcprov-jdk15on (Maven), org.bouncycastle:bcprov-jdk15to18 (Maven). Vendors: Maven.

Executive brief

Bouncy Castle For Java LDAP injection vulnerability

Affected products

  • Maven org.bouncycastle:bcprov-debug-jdk15to18
  • Maven org.bouncycastle:bcprov-ext-jdk15to18
  • Maven org.bouncycastle:bcprov-debug-jdk18on
  • Maven org.bouncycastle:bcprov-debug-jdk15on
  • Maven org.bouncycastle:bcprov-jdk14
  • Maven org.bouncycastle:bcprov-ext-jdk14
  • Maven org.bouncycastle:bcprov-ext-jdk15on
  • Maven org.bouncycastle:bcprov-debug-jdk14
  • Maven org.bouncycastle:bcprov-jdk18on
  • Maven org.bouncycastle:bcprov-jdk15on
  • Maven org.bouncycastle:bcprov-ext-jdk18on
  • Maven org.bouncycastle:bcprov-jdk15to18

Related threats