CVE-2023-5455Medium· 6.5▾ SunlitA Cross-site request forgery vulnerability exists in ipa/session/login_password in all supported versions of IPA. This flaw allows an attacker to trick the user into submitting a request that could perform actions as the user, resulting …
▾ Sunlit zone — Low / medium · no exploitation signal
impact 35.8 · likelihood 0.1 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake. The CVSS score shown above comes from the assigning CNA record, not NVD.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CVEORG
Last analysed / modified upstream
0.6%
A Cross-site request forgery vulnerability exists in ipa/session/login_password in all supported versions of IPA. This flaw allows an attacker to trick the user into submitting a request that could perform actions as the user, resulting in a loss of confidentiality and system integrity. During community penetration testing it was found that for certain HTTP end-points FreeIPA does not ensure CSRF protection. Due to implementation details one cannot use this flaw for reflection of a cookie representing already logged-in user. An attacker would always have to go through a new authentication attempt.
ipa (all versions)idm:DL1 (all versions)idm:DL1 (all versions)idm:DL1 (all versions)idm:DL1 (all versions)idm:DL1 (all versions)idm:DL1 (all versions)idm:DL1 (all versions)idm:DL1 (all versions)idm:DL1 (all versions)ipa (all versions)ipa (all versions)ipa (all versions)ipaidm:client/ipakrb5Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Red Hat has investigated whether a possible mitigation exists for this issue, and has not been able to identify a practical example. Please update the affected package as soon as possible.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-73199Medium· 6.5Ipa: freeipa: null pointer dereference in `ipa-enrollment` extended operation (`join_oid`) via missing request value
CVE-2026-73196Medium· 4.3Ipa: freeipa: authenticated dos in `otptoken-add` via unbounded otp key decoding/re-encoding
CVE-2023-4959Medium· 6.5Quay: cross-site request forgery (csrf) on config-editor page
CVE-2026-115221Medium· 5.4Ipa: freeipa: freeipa uses subject cn as proof of certificate ownership
CVE-2026-53683Medium· 4.3Freeipa: idm: idm/freeipa web ui - client-side open redirect in reset_password.html
CVE-2026-18147High· 8.1A flaw was found in FreeIPA