shiro

CVE-2026-49268 — LDAP 인젝션 인증 우회 취약점 분석 및 해결 | ---|--- 브랜치| 1.13-CVE-2026-49268 작성자| Jinwoo Hwang https://JinwooHwang.com 이 브랜치1.13-CVE-2026-49268는 Apache Shiro 1.13 릴리스의 LDAP 인젝션 인증 우회 취약점에 대한 포괄적인 보안 해결책을 포함하고 있습니다. 공식 NVD 설명 원격 공격자가 DefaultLdapRealm 클래스의 Distinguished NameDN 구성에 LDAP 특수 문자를 주입할...

CVE-2026-41919 Apache OFBiz: Authentication Bypass due to Improper Neutralization of LDAP Special Elements in DN Construction

Improper Neutralization of Special Elements used in an LDAP Query 'LDAP Injection' vulnerability in Apache OFBiz. This issue affects Apache OFBiz: before 24.09.06. Users are recommended to upgrade to version 24.09.06, which fixes the issue...

CVE-2026-41919 Apache OFBiz: Authentication Bypass due to Improper Neutralization of LDAP Special Elements in DN Construction

Improper Neutralization of Special Elements used in an LDAP Query 'LDAP Injection' vulnerability in Apache OFBiz. This issue affects Apache OFBiz: before 24.09.06. Users are recommended to upgrade to version 24.09.06, which fixes the issue...

CVE-2026-41919 Apache OFBiz: Authentication Bypass due to Improper Neutralization of LDAP Special Elements in DN Construction

Improper Neutralization of Special Elements used in an LDAP Query 'LDAP Injection' vulnerability in Apache OFBiz. This issue affects Apache OFBiz: before 24.09.06. Users are recommended to upgrade to version 24.09.06, which fixes the issue...