Lucene search
+L

1 matches found

OSV
OSV
added 2025/10/10 10:51 p.m.7 views

GHSA-R7R6-CC7P-4V5M python-ldap has sanitization bypass in ldap.filter.escape_filter_chars

Summary The sanitization method ldap.filter.escapefilterchars can be tricked to skip escaping of special characters when a crafted list or dict is supplied as the assertionvalue parameter, and the non-default escapemode=1 is configured. Details The method ldap.filter.escapefilterchars supports 3...

6.9CVSS6.6AI score0.00301EPSS
SaveExploits1References5
Rows per page
Query Builder