Privilege Escalation

github.com/vmware-tanzu/pinniped is vulnerable to privilege escalation. The vulnerability exists in the groupSearchFilter function in upstreamldap.go due to lack of validation in search filters which allows an unauthorized user to elevate privileges...