1 matches found
LDAP Injection
archiva-redback-core is vulnerable to LDAP injection. The vulnerability exists due to the lack of sanitization of source.getUsername in LdapBindAuthenticator, and this.getEmail, this.getFullName, this.getUsername in LdapUserQuery...
5.3CVSS2.3AI score0.08004EPSS
SaveExploits1References11Affected Software2
20