Lucene search
China National Vulnerability DatabaseCNVD-2021-91651HistoryNov 03, 2021 - 12:00 a.m.
Thunderdome injection vulnerability
2021-11-0300:00:00
China National Vulnerability Database
www.cnvd.org.cn
8
0.002 Low
EPSS
Percentile
60.7%
Thunderdome is an open source agile planning poker application with an interesting theme by Steven Weathers, an individual developer in the U.S. An injection vulnerability exists in Thunderdome, which stems from the LDAP authentication feature not properly escaping the provided username, and no details of the vulnerability are currently available.
Related
cve
cve
CVE-2021-41232
2021-11-02 18:15:08
veracode
veracode
LDAP Injection
2021-11-03 04:37:10
osv
osv
Improper Neutralization of Special Elements used in an LDAP Query in stevenweathers/thunderdome-planning-poker
2021-11-08 18:16:21
CVE-2021-41232
2021-11-02 18:15:08
cvelist
cvelist
prion
prion
Code injection
2021-11-02 18:15:00
nvd
nvd
CVE-2021-41232
2021-11-02 18:15:08
github
github