Weaknesses of type CWE-90

78 results

Injeção LDAP

Ocorre quando a aplicação constrói consultas LDAP sem sanitizar adequadamente entradas de usuário, permitindo que um atacante injete caracteres especiais (*, (, ), &, |, etc.) para alterar a lógica da consulta. O resultado é acesso não autorizado a dados do diretório ou bypass de autenticação.

Example

Um formulário de login que monta uma consulta LDAP como `(uid=entrada_usuário)` sem escapar aspas ou asteriscos. Se o usuário digitar `*`, a consulta vira `(uid=*)` e retorna todos os usuários do diretório em vez de validar credenciais.

How to mitigate

Use bibliotecas LDAP que ofereçam encoded parameters ou prepared statements (não concatenação de strings). Sempre escape caracteres especiais LDAP segundo RFC 4515, ou valide/whitelist rigorosamente as entradas antes de montá-las na consulta.

CVE-2025-27686LOWDell Unisphere for PowerMax, version(s) prior to 10.2.0.9 and PowerMax version(s) prior to PowerMax 9.2.4.15, contain an Improper NeutralizaEPSS 0.3%CVE-2025-4573MEDIUMLDAP Injection in Mattermost Enterprise Edition When Using Active DirectoryEPSS 0.3%CVE-2025-27631MEDIUMThe TRMTracker web application is vulnerable to LDAP injection attack potentially allowing an attacker to inject code into a query and execuEPSS 0.3%CVE-2026-53658MEDIUMFabric CA: LDAP Injection via Unescaped Username in GetUser FilterEPSS 0.3%CVE-2026-78579MEDIUMImproper Input Sanitization in Okta Access Gateway LDAP Datastore Filter InterpolationEPSS 0.2%CVE-2026-33751MEDIUMn8n Vulnerable to LDAP Filter Injection in LDAP NodeEPSS 0.2%CVE-2026-33609MEDIUMLDAP DN injectionEPSS 0.2%CVE-2026-19930MEDIUMDolibarr User Cloning card.php ldap injectionEPSS 0.2%CVE-2026-45559MEDIUMRoxy-WI: LDAP injection in /user/ldap/<username> (admin-only)EPSS 0.2%CVE-2026-16071MEDIUMKeycloak-services: keycloak-services: ldap entry-dn user search bypasses configured users dn boundaryEPSS 0.2%CVE-2026-29131MEDIUMPGP Decryption Recipient LDAP InjectionEPSS 0.2%CVE-2026-29138MEDIUMPGP Decryption Sender LDAP InjectionEPSS 0.2%CVE-2026-44063MEDIUMLDAP filter injectionEPSS 0.2%CVE-2026-80055MEDIUMDell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper NeutraliEPSS 0.2%CVE-2026-74241MEDIUMQuay: ldap referral filter injection in quay external ldap authenticationEPSS 0.2%CVE-2026-76373MEDIUMFilter Injection through Action Parameters in AD LDAP app for Splunk SOAREPSS 0.2%CVE-2026-44304HIGHLemur: LDAP Filter Injection enables post-authentication privilege escalationEPSS 0.2%CVE-2026-40606MEDIUMProxyAuth Addon LDAP Injection in mitmproxyEPSS 0.2%