Lucene search
+L

1 matches found

OSV
OSV
added 2020/08/31 10:49 p.m.44 views

GHSA-82MG-X548-GQ3J LDAP Injection in ldapauth

Versions 2.2.4 and earlier of ldapauth-fork are affected by an LDAP injection vulnerability. This allows an attacker to inject and run arbitrary LDAP commands via the username parameter. Recommendation ldapauth is not actively maintained, having not seen a publish since 2014. As a result, there i...

7.5CVSS7.7AI score0.02119EPSS
SaveExploits0References9
Rows per page
Query Builder