1 matches found
GHSA-RXVX-HHPJ-Q6PX ZITADEL has LDAP Filter Injection in Login Flow
Summary A vulnerability was discovered in Zitadel's LDAP identity provider implementation, which fails to properly escape user-provided usernames before incorporating them into LDAP search filters. This allows unauthenticated attackers to perform LDAP Filter Injection during the login process...
7.5CVSS5.8AI score0.00479EPSS
SaveExploits0References5
20