1 matches found
LDAP Injection
Apache cxf-rt-rs-extension-search is vulnerable to LDAP injection. It does not encode JAX-RS search query value in LdapQueryVisitor.java , allowing the malicious query injection...