CVE-2023-5003 Active Directory Integration < 4.1.10 - Unauthenticated Log Disclosure

Q: What is CVE-2023-5003?

CVE-2023-5003 is a high-severity vulnerability in Unknown Active Directory Integration / LDAP Integration, published on 16 Oct 2023. An attacker can exploit it over the internet without logging in, with no action from the victim.

Q: Is CVE-2023-5003 being exploited?

It is not confirmed as exploited in the wild, but public exploit code for CVE-2023-5003 exists.

High 7.5 Published 16 Oct 2023 Updated 23 Apr 2025

Unauthenticated attackers can access sensitive LDAP logs stored in an unremoved buffer file, exposing internal directory data.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: Not needed
Fix: Available

What is CVE-2023-5003?

CVE-2023-5003 is a high-severity vulnerability in Unknown Active Directory Integration / LDAP Integration, published on 16 Oct 2023. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

The Active Directory Integration / LDAP Integration WordPress plugin before 4.1.10 stores sensitive LDAP logs in a buffer file when an administrator wants to export said logs. Unfortunately, this log file is never removed, and remains accessible to any users knowing the URL to do so.

Which versions are affected by CVE-2023-5003?

It affects 1 product.

Linux distribution packages (1)

owasp-modsecurity-crs openSUSE:Tumbleweed All versions 4.10.0-1.1

Products include Miniorange Active Directory Integration \/ Ldap Integration.

How do I fix CVE-2023-5003?

Upgrade to a fixed version.

Is CVE-2023-5003 being exploited?

It is not confirmed as exploited in the wild, but public exploit code for CVE-2023-5003 exists.

Public exploit code: 1 Nuclei template.

Sources

Also known as GHSA-2vvx-5g27-9gvj, openSUSE-SU-2025:14717-1.