EUVD-2021-19471

Malware in sbrugna...

CVE-2021-32651: Improper Neutralization of Special Elements used in an LDAP Query

OneDev is a development operations platform. If the LDAP external authentication mechanism is enabled in OneDev versions 4.4.1 and prior, an attacker can manipulate a user search filter to send forged queries to the application and explore the LDAP tree using Blind LDAP Injection techniques. The...

PT-2021-3335

Name of the Vulnerable Software and Affected Versions OneDev versions 4.4.1 and prior Description The issue is related to the LDAP external authentication mechanism in OneDev. If this mechanism is enabled, an attacker can manipulate a user search filter to send forged queries to the application,...