#cwe-140

共收录 3 条相关情报。

← 返回所有主题

漏洞预警2026-10-06 发布MEDIUM

A flaw was found in SSSD. When configured to use Microsoft Entra ID, search inputs are not properly sanitized before being incorporated into directory query filters. A local use...

CVE-2026-104047

A flaw was found in SSSD. When configured to use Microsoft Entra ID, search inputs are not properly sanitized before bei

来源摘录 · NVD

安全公告2026-10-06 发布INFO

A flaw was found in SSSD. When configured with the Entra ID identity provider, input lookup names...

CVE-2026-104040

A flaw was found in SSSD. When configured with the Entra ID identity provider, input lookup names containing single quot

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-140 #severity:medium

漏洞预警2026-10-06 发布MEDIUM

A flaw was found in SSSD. When configured with the Entra ID identity provider, input lookup names containing single quotes are not properly escaped before being included in Micr...

CVE-2026-104040

A flaw was found in SSSD. When configured with the Entra ID identity provider, input lookup names containing single quot

来源摘录 · NVD