Lucene search
+L

1 matches found

osv_ghsa
osv_ghsa
•added 2026/05/08 5:11 p.m.•24 views

GHSA-RXVX-HHPJ-Q6PX ZITADEL has LDAP Filter Injection in Login Flow

Summary A vulnerability was discovered in Zitadel's LDAP identity provider implementation, which fails to properly escape user-provided usernames before incorporating them into LDAP search filters. This allows unauthenticated attackers to perform LDAP Filter Injection during the login process...

7.5CVSS7.5AI score0.00616EPSS
SaveExploits0References5
Rows per page
Query Builder