2 matches found
CVE-2026-44616 Apache Zeppelin: LDAP injection in ActiveDirectoryGroupRealm filter construction
LDAP injection vulnerability in Apache Zeppelin. ActiveDirectoryGroupRealm constructed LDAP search filters without escaping user-controlled input, allowing an authenticated attacker to inject LDAP filter syntax through the user-search endpoint and potentially expose directory...
6.5CVSS5.8AI score
SaveExploits0References5
EUVD-2026-51161
LDAP injection vulnerability in Apache Zeppelin. ActiveDirectoryGroupRealm constructed LDAP search filters without escaping user-controlled input, allowing an authenticated attacker to inject LDAP filter syntax through the user-search endpoint and potentially expose directory...
5.8AI score0.00449EPSS
SaveExploits0References2
20