Search Vulnerabilities

ProxyAuth Addon LDAP Injection in mitmproxy

LDAP Injection in PAC4J

Maddy Mail Server: LDAP Filter Injection via Unsanitized Username

LDAP Injection Vulnerability in LDAPStoreHelper.java

LDAP injection in MISP ApacheAuthenticate when using a user-controlled Apache environment variable

OPNsense has an LDAP Injection via Unsanitized Username in Authentication

PGP Decryption Sender LDAP Injection

PGP Decryption Recipient LDAP Injection

If auth_username_chars is empty, it is possible to inject arbitrary LDAP filter to Dovecot's LDAP authentication

n8n Vulnerable to LDAP Filter Injection in LDAP Node

SuiterCRM has LDAP Filter Injection in Authentication Module

Parse Server has an LDAP injection via unsanitized user input in DN and group filter construction

WeKan < 8.19 LDAP Authentication Filter Injection

WatchGuard Firebox LDAP Injection

Moonraker with LDAP Enabled Allows Malicious Search Filter Injection

Kanboard LDAP Injection Vulnerability can Lead to User Enumeration and Information Disclosure

Homarr issing input sanitization and possible privilege escalation through ldap search query injection

CISA Thorium LDAP injection

Apache HertzBeat (incubating): Jmx JNDI injection vulnerability

EspoCRM vulnerable to LDAP Injection through Improper Neutralization of Special Elements