Apache StreamPark LDAP Injection vulnerability

Apache StreamPark versions 1.0.0 to 2.0.0 have an LDAP injection vulnerability. LDAP Injection is an attack used to exploit web based applications that construct LDAP statements based on user input. When an application fails to properly sanitize user input, it's possible to modify LDAP statements...

WS-2021-0160

In authelia, versions v4.0.0 to v4.1.0 are vulnerable against LDAP injection as a result of failing to properly sanitize user input. It’s possible to modify LDAP statements through techniques similar to SQL injections, LDAP injection could result in the granting of permissions to unauthorized...

CVE-2021-32651

OneDev is a development operations platform. If the LDAP external authentication mechanism is enabled in OneDev versions 4.4.1 and prior, an attacker can manipulate a user search filter to send forged queries to the application and explore the LDAP tree using Blind LDAP Injection techniques. The...