CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

4 matches found

OSV•added 2021/04/13 3:30 p.m.•33 views

GHSA-22CM-3QF2-2WC7 LDAP Injection in is-user-valid

All versions of package is-user-valid are vulnerable to LDAP Injection which can lead to either authentication bypass or information exposure...

7.5CVSS7.7AI score0.01419EPSS

SaveExploits1References2

Github Security Blog•added 2021/04/13 3:30 p.m.•57 views

LDAP Injection in is-user-valid

All versions of package is-user-valid are vulnerable to LDAP Injection which can lead to either authentication bypass or information exposure...

7.5CVSS3.2AI score0.01419EPSS

SaveExploits1References3Affected Software1

Veracode•added 2021/02/15 10:48 a.m.•18 views

Lightweight Directory Access Protocol (LDAP) Injection

is-user-valid is vulnerable to Lightweight Directory Access Protocol LDAP Injection. The vulnerability exists due to an unsanitized validate function when authenticating the email in the getEmail function...

7.5CVSS2.4AI score0.01419EPSS

SaveExploits1References2Affected Software1

Cvelist•added 2021/02/11 11:25 a.m.•30 views

CVE-2021-23335 LDAP Injection

All versions of package is-user-valid are vulnerable to LDAP Injection which can lead to either authentication bypass or information exposure...

7.5CVSS8AI score0.01419EPSS

SaveExploits1References1

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by