Code injection

2017-09-0621:29:00

PRIOn knowledge base

www.prio-n.com

7.3 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

61.3%

ldapauth-fork before 2.3.3 allows remote attackers to perform LDAP injection attacks via a crafted username.

CPENameOperatorVersion
ldapauth-forklt2.3.3

CPE	Name	Operator	Version
	ldapauth-fork	lt	2.3.3

References

www.openwall.com/lists/oss-security/2015/09/18/8

www.openwall.com/lists/oss-security/2015/09/21/2

github.com/vesse/node-ldapauth-fork/commit/3feea43e243698bcaeffa904a7324f4d96df60e4

github.com/vesse/node-ldapauth-fork/issues/21