#cwe-90

共收录 39 条相关情报。

漏洞预警2026-10-23 发布MEDIUM

An LDAP filter injection vulnerability in Zimbra Collaboration Suite (ZCS) allows an authenticated user to query otherwise unreturned attributes of calendar resources through Se...

CVE-2026-93636

An LDAP filter injection vulnerability in Zimbra Collaboration Suite (ZCS) allows an authenticated user to query otherwi

来源摘录 · NVD

#cve #cwe-90

漏洞预警2026-10-22 发布INFO

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 10.1 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that, when OmniAuth SAML and LDAP auto-...

CVE-2026-15723

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 10.1 before 19.3.6, 19.4 before 19.4.3, and 1

历史摘要 · 未重新核验 · NVD

#cve #cwe-90

漏洞预警2026-10-13 发布INFO

A flaw in Portal for ArcGIS could allow LDAP injection through administrative functionality that constructs Active Directory or LDAP search queries without sufficient input neut...

CVE-2026-10759

A flaw in Portal for ArcGIS could allow LDAP injection through administrative functionality that constructs Active Direc

历史摘要 · 未重新核验 · NVD

#cve #cwe-90

漏洞预警2026-10-12 发布INFO

Frappe before 14.99.2 and 15.x before 15.86.0 contains an LDAP injection vulnerability because certain endpoints do not sanitize user-supplied parameters before using them in LD...

CVE-2025-71431

Frappe before 14.99.2 and 15.x before 15.86.0 contains an LDAP injection vulnerability because certain endpoints do not

历史摘要 · 未重新核验 · NVD

#cve #cwe-90

漏洞预警2026-10-12 发布INFO

LibreNMS before 26.9.0 contains an LDAP filter injection in ldap-authorization and ad-authorization modes because usernames are inserted unescaped into LDAP search filters and a...

CVE-2026-109357

LibreNMS before 26.9.0 contains an LDAP filter injection in ldap-authorization and ad-authorization modes because userna

历史摘要 · 未重新核验 · NVD

#cve #cwe-90

安全公告2026-10-12 发布INFO

LibreNMS before 26.9.0 LDAP Filter Injection Authentication Bypass via Authorization Header

CVE-2026-109357

LibreNMS before 26.9.0 contains an LDAP filter injection in ldap-authorization and ad-authorization modes because userna

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-90

漏洞预警2026-09-28 发布INFO

A vulnerability was identified in Eleveo Call Recording Software 9.7.0. This vulnerability affects unknown code of the file /callrec/userAddAction.do of the component User Manag...

CVE-2026-101145

A vulnerability was identified in Eleveo Call Recording Software 9.7.0. This vulnerability affects unknown code of the f

历史摘要 · 未重新核验 · NVD

#cve #cwe-74 #cwe-90

漏洞预警2026-09-28 发布INFO

LDAPCache and LDAPBackingEngine build LDAP search filters for user lookup and role lookup by textually substituting the placeholders %u, %dn, and %fqdn (drawn from the login nam...

CVE-2026-90979

LDAPCache and LDAPBackingEngine build LDAP search filters for user lookup and role lookup by textually substituting the

历史摘要 · 未重新核验 · NVD

#cve #cwe-90

漏洞预警2026-09-15 发布INFO

Fabric CA is a Certificate Authority for Hyperledger Fabric. Prior to 1.5.21, when fabric-ca is configured with an LDAP backend, Client.GetUser in lib/server/ldap/client.go inse...

CVE-2026-53658

Fabric CA is a Certificate Authority for Hyperledger Fabric. Prior to 1.5.21, when fabric-ca is configured with an LDAP

历史摘要 · 未重新核验 · NVD

#cve #cwe-90

漏洞预警2026-09-15 发布INFO

OpenBao is an open source identity-based secrets management system. Prior to 2.5.5, OpenBao used EscapeLDAPValue, an RFC 4514 distinguished-name escaping function, where RFC 451...

CVE-2026-55770

OpenBao is an open source identity-based secrets management system. Prior to 2.5.5, OpenBao used EscapeLDAPValue, an RFC

历史摘要 · 未重新核验 · NVD

#cve #cwe-90

漏洞预警2026-09-15 发布INFO

Open Access Management (OpenAM) is an access management solution. Prior to 16.1.1, MSISDNValidation in the MSISDN authentication module concatenates the request-supplied MSISDN ...

CVE-2026-46619

Open Access Management (OpenAM) is an access management solution. Prior to 16.1.1, MSISDNValidation in the MSISDN authen

历史摘要 · 未重新核验 · NVD

#cve #cwe-90

漏洞预警2026-09-15 发布INFO

Open Access Management (OpenAM) is an access management solution. Prior to 16.1.1, IdentityResourceV1.queryCollection() passes the _queryId parameter from /json/{realm}/users to...

CVE-2026-41573

Open Access Management (OpenAM) is an access management solution. Prior to 16.1.1, IdentityResourceV1.queryCollection()

历史摘要 · 未重新核验 · NVD

#cve #cwe-90

安全公告2026-09-11 发布INFO

Central Dogma: LDAP injection in SearchFirstActiveDirectoryRealm enables authentication confusion and audit log evasion

CVE-2026-11748

# Vulnerability `SearchFirstActiveDirectoryRealm.findUserDn()` substitutes the user-supplied username from the login fo

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #maven #cwe-90 #severity:medium

漏洞预警2026-09-02 发布INFO

Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection') vulnerability in Drupal LDAP / Active Directory Integration allows LDAP Injection. This issu...

CVE-2026-81205

Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection') vulnerability in Drupal LDAP / Acti

历史摘要 · 未重新核验 · NVD

#cve #cwe-90

安全公告2026-09-02 发布INFO

LDAP / Active Directory Integration - Moderately critical - Information Disclosure - SA-CONTRIB-2026-115

CVE-2026-81205

Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection') vulnerability in Drupal LDAP / Acti

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-90

漏洞预警2026-08-27 发布INFO

Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection') vulnerability in Apache APISIX. A caller who holds valid credentials for one entry in the L...

CVE-2026-75020

Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection') vulnerability in Apache APISIX. A

历史摘要 · 未重新核验 · NVD

#cve #cwe-90

安全公告2026-08-20 发布INFO

In versions below 2.3.8 of the AD LDAP app for Splunk SOAR, a user who holds a role with...

CVE-2026-76373

In versions below 2.3.8 of the AD LDAP app for Splunk SOAR, a user who holds a role with permission to run actions could

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-90 #severity:medium

漏洞预警2026-08-19 发布INFO

In versions below 2.3.8 of the AD LDAP app for Splunk SOAR, a user who holds a role with permission to run actions could inject crafted input into an Active Directory query to e...

CVE-2026-76373

In versions below 2.3.8 of the AD LDAP app for Splunk SOAR, a user who holds a role with permission to run actions could

历史摘要 · 未重新核验 · NVD

#cve #cwe-90

漏洞预警2026-08-16 发布INFO

A security flaw has been discovered in Dolibarr up to 23.0.3. Affected is an unknown function of the file htdocs/user/card.php of the component User Cloning. The manipulation of...

CVE-2026-19930

A security flaw has been discovered in Dolibarr up to 23.0.3. Affected is an unknown function of the file htdocs/user/ca

历史摘要 · 未重新核验 · NVD

#cve #cwe-74 #cwe-90

安全公告2026-08-15 发布INFO

A flaw was found in Red Hat Quay's external Lightweight Directory Access Protocol (LDAP)...

CVE-2026-74241

A flaw was found in Red Hat Quay's external Lightweight Directory Access Protocol (LDAP) authentication handling. When a

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-90 #severity:medium