LDAP Tool Box Self Service Password 1.5.2 Account Takeover via HTTP Host Header

Advisories

severity: high
date: December 19, 2025
Affecting: LDAP Tool Box Self Service Password 1.5.2
CVE: CVE-2023-53958
CWE: CWE-640 Weak Password Recovery Mechanism for Forgotten Password
CVSS: 8.6
CVSS V4 Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
References: ExploitDB-51275
Official Product Homepage
Credit: Tahar BENNACEF (aka tar.gz)
Description: LDAP Tool Box Self Service Password 1.5.2 contains a password reset vulnerability that allows attackers to manipulate HTTP Host headers during token generation. Attackers can craft malicious password reset requests that generate tokens sent to a controlled server, enabling potential account takeover by intercepting and using stolen reset tokens.