Lucene search

K
osvGoogleOSV:CVE-2021-43350
HistoryNov 11, 2021 - 1:15 p.m.

CVE-2021-43350

2021-11-1113:15:07
Google
osv.dev
5

6.9 Medium

AI Score

Confidence

High

0.006 Low

EPSS

Percentile

78.7%

An unauthenticated Apache Traffic Control Traffic Ops user can send a request with a specially-crafted username to the POST /login endpoint of any API version to inject unsanitized content into the LDAP filter.

6.9 Medium

AI Score

Confidence

High

0.006 Low

EPSS

Percentile

78.7%