Lucene search
+L

3 matches found

OSV
OSV
added 2026/03/11 12:23 a.m.5 views

GHSA-7M6R-FHH7-R47C Parse Server vulnerable to LDAP injection via unsanitized user input in DN and group filter construction

Impact The LDAP authentication adapter is vulnerable to LDAP injection. User-supplied input authData.id is interpolated directly into LDAP Distinguished Names DN and group search filters without escaping special characters. This allows an attacker with valid LDAP credentials to manipulate the bin...

6CVSS5.8AI score0.00423EPSS
SaveExploits0References5
Rows per page
Query Builder