CVE-2023-53958: Ltb-Project LDAP Tool Box Self Service Password

High severity, CVSS 7.5. EPSS: 0.4% chance of exploitation in the next 30 days.

LDAP Tool Box Self Service Password 1.5.2 contains a password reset vulnerability that allows attackers to manipulate HTTP Host headers during token generation. Attackers can craft malicious password reset requests that generate tokens sent to a controlled server, enabling potential account takeover by intercepting and using stolen reset tokens.

Affected products

• Ltb-Project LDAP Tool Box Self Service Password: version 1.5.2 only

Published 2025-12-19. Last modified 2026-06-17.