/ 
Lemonldap-NG-Manager-0.511
/ Lemonldap::NG::Manager::Base
Security Advisories (2)
CVE-2020-16093 (2022-07-18)

In LemonLDAP::NG (aka lemonldap-ng) through 2.0.8, validity of the X.509 certificate is not checked by default when connecting to remote LDAP backends, because the default configuration of the Net::LDAPS module for Perl is used.

CVE-2020-24660 (2020-09-14)

An issue was discovered in LemonLDAP::NG through 2.0.8, when NGINX is used. An attacker may bypass URL-based access control to protected Virtual Hosts by submitting a non-normalized URI. This also affects versions before 0.5.2 of the "Lemonldap::NG handler for Node.js" package.

NAME

Lemonldap::NG::Manager::Base - Simple module to extend CGI to manage HTTP "If-Modified-Since / 304 Not Modified" system.

SYNOPSIS

use Lemonldap::NG::Manager::Base;

my $cgi = Lemonldap::NG::Manager::Base->new();
$cgi->header_public($ENV{SCRIPT_FILENAME});
print "<html><head><title>Static page</title></head>";
...

DESCRIPTION

Lemonldap::NG::Manager::Base just add header_public subroutine to CGI module to avoid printing HTML elements that can be cached.

METHODS

header_public

header_public works like header (see CGI) but the first argument has to be a filename: the last modify date of this file is used for reference.

EXPORT

SEE ALSO

Lemonldap::NG::Manager, CGI

AUTHOR

Xavier Guimard, <x.guimard@free.fr>

COPYRIGHT AND LICENSE

Copyright (C) 2005 by Xavier Guimard <x.guimard@free.fr>

This library is free software; you can redistribute it and/or modify it under the same terms as Perl itself, either Perl version 5.8.4 or, at your option, any later version of Perl 5 you may have available.