Search Vulnerabilities

Apache Airflow FAB provider: LDAP Filter Injection in FAB Auth Manager _search_ldap reachable via /auth/token

Apache CXF: LDAP Injection vulnerability in XKMS LDAP Repository

LDAP filter injection

Apache OFBiz: Authentication Bypass due to Improper Neutralization of LDAP Special Elements in DN Construction

ZITADEL: LDAP Filter Injection in Login Flow

Lemur: LDAP Filter Injection enables post-authentication privilege escalation

ProxyAuth Addon LDAP Injection in mitmproxy

LDAP Injection in PAC4J

Maddy Mail Server: LDAP Filter Injection via Unsanitized Username

LDAP Injection Vulnerability in LDAPStoreHelper.java

LDAP injection in MISP ApacheAuthenticate when using a user-controlled Apache environment variable

OPNsense has an LDAP Injection via Unsanitized Username in Authentication

PGP Decryption Sender LDAP Injection

PGP Decryption Recipient LDAP Injection

If auth_username_chars is empty, it is possible to inject arbitrary LDAP filter to Dovecot's LDAP authentication

n8n Vulnerable to LDAP Filter Injection in LDAP Node

SuiterCRM has LDAP Filter Injection in Authentication Module

Parse Server has an LDAP injection via unsanitized user input in DN and group filter construction

WeKan < 8.19 LDAP Authentication Filter Injection

WatchGuard Firebox LDAP Injection