Lucene search
K

CVE-2021-37933

🗓️ 14 Oct 2021 15:02:20Reported by mitreType 
cve
 cve
🔗 web.nvd.nist.gov👁 45 Views🌐 WEB

LDAP injection vulnerability in /account/login in Huntflow Enterprise before 3.10.6 allows unauthenticated remote user to bypass authentication

Related
Detection
Refs
Paths
ReporterTitlePublishedViews
Family
Circl
CVE-2021-37933
14 Oct 202120:27
circl
CNNVD
Huntflow Enterprise 注入漏洞
14 Oct 202100:00
cnnvd
Cvelist
CVE-2021-37933
14 Oct 202115:02
cvelist
EUVD
EUVD-2021-24409
7 Oct 202500:30
euvd
NVD
CVE-2021-37933
14 Oct 202116:15
nvd
Prion
Authentication flaw
14 Oct 202116:15
prion
RedhatCVE
CVE-2021-37933
22 May 202520:54
redhatcve
NVD
ParameterPositionPathDescriptionCWE
emailrequest body/account/loginLDAP injection via unsafely constructed LDAP query using the email parameter in the login endpoint allows authentication bypass.CWE-74

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

21 Nov 2024 06:16Current
7.8High risk
Vulners AI Score7.8
CVSS 25
CVSS 3.17.5
EPSS0.01466
45