Lucene search
+L

1 matches found

Veracode
Veracode
added 2020/06/22 5:1 a.m.37 views

LDAP Injection

archiva-redback-core is vulnerable to LDAP injection. The vulnerability exists due to the lack of sanitization of source.getUsername in LdapBindAuthenticator, and this.getEmail, this.getFullName, this.getUsername in LdapUserQuery...

5.3CVSS2.3AI score0.08004EPSS
SaveExploits1References11Affected Software2
Rows per page
Query Builder