Weaknesses of type CWE-90

65 results

Injeção LDAP

Ocorre quando a aplicação constrói consultas LDAP sem sanitizar adequadamente entradas de usuário, permitindo que um atacante injete caracteres especiais (*, (, ), &, |, etc.) para alterar a lógica da consulta. O resultado é acesso não autorizado a dados do diretório ou bypass de autenticação.

Example

Um formulário de login que monta uma consulta LDAP como `(uid=entrada_usuário)` sem escapar aspas ou asteriscos. Se o usuário digitar `*`, a consulta vira `(uid=*)` e retorna todos os usuários do diretório em vez de validar credenciais.

How to mitigate

Use bibliotecas LDAP que ofereçam encoded parameters ou prepared statements (não concatenação de strings). Sempre escape caracteres especiais LDAP segundo RFC 4515, ou valide/whitelist rigorosamente as entradas antes de montá-las na consulta.

CVE-2021-43350—LDAP filter injection vulnerability in Traffic OpsEPSS 4.4%CVE-2024-27310MEDIUMDOS VulnerabilityEPSS 2.3%CVE-2019-11277HIGHVolume Services is vulnerable to an LDAP injection attackEPSS 1.7%CVE-2023-29050HIGHThe optional "LDAP contacts provider" could be abused by privileged users to inject LDAP filter strings that allow to access content outsideEPSS 1.7%CVE-2021-41276MEDIUMIndirect LDAP injection in TuleapEPSS 1.5%CVE-2022-45910MEDIUMApache ManifoldCF: LDAP Injection Vulnerability - ActiveDirectory AuthoritiesEPSS 1.5%CVE-2021-41232HIGHImproper Neutralization of Special Elements used in an LDAP QueryEPSS 1.5%CVE-2021-43782MEDIUMIndirect LDAP injection in TuleapEPSS 1.4%CVE-2020-5281MEDIUMLDAP connector injection in PerunEPSS 1.3%CVE-2023-28853HIGHMastodon's blind LDAP injection in login allows the attacker to leak arbitrary attributes from LDAP databaseEPSS 1.3%CVE-2021-32651LOWLDAP injection via OneDev may leak some LDAP directory informationEPSS 1.1%CVE-2026-42568MEDIUMYamcs Vulnerable to LDAP Injection in LdapAuthModuleEPSS 1.0%CVE-2022-4254HIGHsssd: libsss_certmap fails to sanitise certificate data used in LDAP filtersEPSS 0.9%CVE-2024-33868CRITICALAn issue was discovered in linqi before 1.4.0.1 on Windows. There is LDAP injection.EPSS 0.9%CVE-2023-51446MEDIUMGLPI LDAP Injection during authenticationEPSS 0.9%CVE-2020-5246HIGHLDAP injection vulnerability in Traccar GPS Tracking SystemEPSS 0.9%CVE-2015-10027MEDIUMhydrian TTRSS-Auth-LDAP Username ldap injectionEPSS 0.8%CVE-2026-58222HIGHSamba: samba ad ldap compare filter injection and trusted-request confusion disclose protected attributesEPSS 0.8%CVE-2026-44617MEDIUMApache Zeppelin: LDAP filter injection in LdapRealm — incomplete fix of CVE-2024-31867EPSS 0.8%CVE-2024-54852CRITICALWhen LDAP connection is activated in Teedy versions between 1.9 to 1.12, the username field of the login form is vulnerable to LDAP injectioEPSS 0.8%