Lucene search
+L

7 matches found

osv-ghsa
osv-ghsa
•added 2021/04/13 3:30 p.m.•47 views

GHSA-22CM-3QF2-2WC7 LDAP Injection in is-user-valid

All versions of package is-user-valid are vulnerable to LDAP Injection which can lead to either authentication bypass or information exposure...

7.5CVSS7.7AI score0.01419EPSS
SaveExploits1References2
Github Security Blog
Github Security Blog
•added 2021/04/13 3:30 p.m.•69 views

LDAP Injection in is-user-valid

All versions of package is-user-valid are vulnerable to LDAP Injection which can lead to either authentication bypass or information exposure...

7.5CVSS3.2AI score0.01419EPSS
SaveExploits1References3Affected Software1
Veracode
Veracode
•added 2021/02/15 10:48 a.m.•25 views

Lightweight Directory Access Protocol (LDAP) Injection

is-user-valid is vulnerable to Lightweight Directory Access Protocol LDAP Injection. The vulnerability exists due to an unsanitized validate function when authenticating the email in the getEmail function...

7.5CVSS2.4AI score0.01419EPSS
SaveExploits1References2Affected Software1
Mend
Mend
•added 2021/02/11 11:25 a.m.•4 views

CVE-2021-23335

All versions of package is-user-valid are vulnerable to LDAP Injection which can lead to either authentication bypass or information exposure...

8.7CVSS0.01419EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2021/02/11 11:25 a.m.•40 views

CVE-2021-23335 LDAP Injection

All versions of package is-user-valid are vulnerable to LDAP Injection which can lead to either authentication bypass or information exposure...

7.5CVSS8AI score0.01419EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2021/02/11 12:00 a.m.•3 views

PT-2021-15441

Name of the Vulnerable Software and Affected Versions is-user-valid affected versions not specified Description The issue concerns LDAP Injection, which can result in either authentication bypass or information exposure. Recommendations At the moment, there is no information about a newer version...

7.5CVSS5.8AI score0.01419EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/02/11 12:00 a.m.•6 views

CVE-2021-23335: Improper Neutralization of Special Elements in Output Used by a Downstream Component

All versions of package is-user-valid are vulnerable to LDAP Injection which can lead to either authentication bypass or information exposure...

7.5CVSS5.7AI score0.01419EPSS
SaveExploits1References2
Rows per page
Query Builder