CVE-2023-53958 LDAP Tool Box Self Service Password 1.5.2 Account Takeover via HTTP Host Header
Attackers can hijack accounts by manipulating HTTP Host headers to intercept password reset tokens in LDAP Tool Box Self Service Password.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2023-53958?
CVE-2023-53958 is a high-severity authentication bypass vulnerability in ltb-project LDAP Tool Box Self Service Password, published on 19 Dec 2025. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.
Official description
LDAP Tool Box Self Service Password 1.5.2 contains a password reset vulnerability that allows attackers to manipulate HTTP Host headers during token generation. Attackers can craft malicious password reset requests that generate tokens sent to a controlled server, enabling potential account takeover by intercepting and using stolen reset tokens.
Weakness: CWE-640
Which versions are affected by CVE-2023-53958?
How do I fix CVE-2023-53958?
No fix has been published for CVE-2023-53958 yet. Limit exposure of the affected software until one is available.
Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.
Is CVE-2023-53958 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2023-53958 exists.
Sources
Also known as GHSA-m5gx-365m-gfgx.