Weaknesses of type CWE-90

78 results

Injeção LDAP

Ocorre quando a aplicação constrói consultas LDAP sem sanitizar adequadamente entradas de usuário, permitindo que um atacante injete caracteres especiais (*, (, ), &, |, etc.) para alterar a lógica da consulta. O resultado é acesso não autorizado a dados do diretório ou bypass de autenticação.

Example

Um formulário de login que monta uma consulta LDAP como `(uid=entrada_usuário)` sem escapar aspas ou asteriscos. Se o usuário digitar `*`, a consulta vira `(uid=*)` e retorna todos os usuários do diretório em vez de validar credenciais.

How to mitigate

Use bibliotecas LDAP que ofereçam encoded parameters ou prepared statements (não concatenação de strings). Sempre escape caracteres especiais LDAP segundo RFC 4515, ou valide/whitelist rigorosamente as entradas antes de montá-las na consulta.

CVE-2025-52575MEDIUMEspoCRM vulnerable to LDAP Injection through Improper Neutralization of Special ElementsEPSS 0.7%CVE-2026-44930MEDIUMApache CXF: LDAP Injection vulnerability in XKMS LDAP RepositoryEPSS 0.7%CVE-2026-25560HIGHWeKan < 8.19 LDAP Authentication Filter InjectionEPSS 0.7%CVE-2026-33289HIGHSuiterCRM has LDAP Filter Injection in Authentication ModuleEPSS 0.7%CVE-2023-6905MEDIUMJahastech NxFilter Bind Request ldap injectionEPSS 0.7%CVE-2025-48208HIGHApache HertzBeat (incubating): Jmx JNDI injection vulnerabilityEPSS 0.6%CVE-2026-11748MEDIUMA vulnerability has been identified in centraldogma-server-auth-shiro versions prior to 0.84.0, where the SearchFirstActiveDirectoryRealm suEPSS 0.6%CVE-2026-40459HIGHLDAP Injection in PAC4JEPSS 0.6%CVE-2026-46619CRITICALOpenAM Authentication Bypass via MSISDN LDAP InjectionEPSS 0.6%CVE-2026-46745MEDIUMApache Airflow FAB provider: LDAP Filter Injection in FAB Auth Manager _search_ldap reachable via /auth/tokenEPSS 0.6%CVE-2026-75020HIGHApache APISIX: ldap-auth plugin cross-subtree identity impersonationEPSS 0.5%CVE-2023-3447HIGHActive Directory Integration / LDAP Integration <= 4.1.5 - Authenticated (Subscriber+) LDAP InjectionEPSS 0.5%CVE-2026-11770HIGH389-ds-base: 389-ds-base: pre-auth ldap filter injection in cleanallruv status checkEPSS 0.5%CVE-2026-0636MEDIUMLDAP Injection Vulnerability in LDAPStoreHelper.javaEPSS 0.5%CVE-2026-13696HIGHLDAP Injection in HAVELSAN's Liman MYSEPSS 0.5%CVE-2026-44617MEDIUMApache Zeppelin: LDAP filter injection in LdapRealm — incomplete fix of CVE-2024-31867EPSS 0.5%CVE-2024-56841CRITICALA vulnerability has been identified in Mendix LDAP (All versions < V1.1.2). Affected versions of the module are vulnerable to LDAP injectionEPSS 0.5%CVE-2026-49268HIGHApache Shiro: LDAP DN Injection in DefaultLdapRealmEPSS 0.5%CVE-2023-31025MEDIUMCVEEPSS 0.5%CVE-2026-44671HIGHZITADEL: LDAP Filter Injection in Login FlowEPSS 0.5%