Weaknesses of type CWE-90

92 results

Injeção LDAP

Ocorre quando a aplicação constrói consultas LDAP sem sanitizar adequadamente entradas de usuário, permitindo que um atacante injete caracteres especiais (*, (, ), &, |, etc.) para alterar a lógica da consulta. O resultado é acesso não autorizado a dados do diretório ou bypass de autenticação.

Example

Um formulário de login que monta uma consulta LDAP como `(uid=entrada_usuário)` sem escapar aspas ou asteriscos. Se o usuário digitar `*`, a consulta vira `(uid=*)` e retorna todos os usuários do diretório em vez de validar credenciais.

How to mitigate

Use bibliotecas LDAP que ofereçam encoded parameters ou prepared statements (não concatenação de strings). Sempre escape caracteres especiais LDAP segundo RFC 4515, ou valide/whitelist rigorosamente as entradas antes de montá-las na consulta.

CVE-2026-49268HIGHApache Shiro: LDAP DN Injection in DefaultLdapRealmEPSS 0.5%CVE-2024-56841CRITICALA vulnerability has been identified in Mendix LDAP (All versions < V1.1.2). Affected versions of the module are vulnerable to LDAP injectionEPSS 0.5%CVE-2026-41573HIGHOpenAM LDAP Injection via `_queryId` ParameterEPSS 0.5%CVE-2023-31025MEDIUMCVEEPSS 0.5%CVE-2026-44671HIGHZITADEL: LDAP Filter Injection in Login FlowEPSS 0.5%CVE-2026-11748MEDIUMA vulnerability has been identified in centraldogma-server-auth-shiro versions prior to 0.84.0, where the SearchFirstActiveDirectoryRealm suEPSS 0.5%CVE-2025-12764HIGHpgAdmin 4: LDAP injection vulnerability in LDAP authentication flow.EPSS 0.5%CVE-2026-41919CRITICALApache OFBiz: Authentication Bypass due to Improper Neutralization of LDAP Special Elements in DN ConstructionEPSS 0.5%CVE-2026-53658MEDIUMFabric CA: LDAP Injection via Unescaped Username in GetUser FilterEPSS 0.4%CVE-2026-31828MEDIUMParse Server has an LDAP injection via unsanitized user input in DN and group filter constructionEPSS 0.4%CVE-2026-90979HIGHApache Karaf: LDAP filter injection in JAAS LDAP login modulesEPSS 0.4%CVE-2026-15723HIGHImproper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection') in GitLabEPSS 0.4%CVE-2026-19930MEDIUMDolibarr User Cloning card.php ldap injectionEPSS 0.4%CVE-2026-40193HIGHMaddy Mail Server: LDAP Filter Injection via Unsanitized UsernameEPSS 0.4%CVE-2026-19271HIGHBlind LDAP Injection in Sign-In Endpoint in TÜBİTAK BİLGEM's LiderahenkEPSS 0.4%CVE-2026-34578HIGHOPNsense has an LDAP Injection via Unsanitized Username in AuthenticationEPSS 0.4%CVE-2026-49469MEDIUMGLPI: LDAP filter injection in user import featureEPSS 0.4%CVE-2026-21880MEDIUMKanboard LDAP Injection Vulnerability can Lead to User Enumeration and Information DisclosureEPSS 0.4%CVE-2026-110256MEDIUMDockhand before 1.0.19 Username Enumeration via LDAP Injection in tryLdapAuthEPSS 0.4%CVE-2026-94053CRITICALApache MINA SSHD: LDAP injection in sshd-ldapEPSS 0.4%