Grokability Snipe-IT encryption issue vulnerability

Versions of Grokability Snipe-IT prior to 8.6.3 contain an encryption vulnerability. This vulnerability arises because Ldap::connectToLdap fails to handle the return value from ldapstarttls, allowing path traversal attacks to force the use of plaintext LDAP bindings. This enables attackers to...