GHSA-98Q5-5QH2-7W75 Central Dogma: LDAP injection in SearchFirstActiveDirectoryRealm enables authentication confusion and audit log evasion

Vulnerability SearchFirstActiveDirectoryRealm.findUserDn substitutes the user-supplied username from the login form into an LDAP search filter template default cn=0 without escaping RFC 4515 filter metacharacters , , , , NUL. Combined with SearchControls.setCountLimit1 on the same call site, this...

Central Dogma: LDAP injection in SearchFirstActiveDirectoryRealm enables authentication confusion and audit log evasion

Vulnerability SearchFirstActiveDirectoryRealm.findUserDn substitutes the user-supplied username from the login form into an LDAP search filter template default cn=0 without escaping RFC 4515 filter metacharacters , , , , NUL. Combined with SearchControls.setCountLimit1 on the same call site, this...