CVE-2021-32651

CVE-2021-32651 affects OneDev (4.4.1 and earlier) where enabling LDAP external authentication allows Blind LDAP Injection by manipulating the User Search Filter, enabling forged queries to explore the LDAP tree and potentially leak directory information. The issue is fixed in version 4.4.2; upgra...