The LDAP Tool Box project provides a set of LDAP-related applications, administrative tools, and other utilities. They have just released the version 1.4.3 of their Self Service Password tool, which is a PHP application that allows users to change their password in an LDAP directory. Changes in this release include:
- Fixed a security issue that could allow SMS-based password reset to change the password for any account
- Fixed a security issue that could allow the same captcha to be used multiple times
- Updated the Docker image to include sendmail