Fallos del tipo CWE-90

95 resultados

Injeção LDAP

Ocorre quando uma aplicação constrói uma consulta LDAP incluindo entrada do usuário sem sanitização adequada. Um atacante pode injetar caracteres e sintaxe LDAP especiais para modificar a lógica da consulta, contornando autenticação, extraindo dados não autorizados ou alterando estruturas de diretório.

Ejemplo

Um formulário de login que monta a query como `(uid=*)(|(uid=admin` sem escapar caracteres especiais. Um atacante entra `*)(|(uid=` no campo de usuário, alterando a consulta para sempre retornar verdadeiro e ganhando acesso de admin.

Cómo mitigar

Use funções nativas de escape LDAP da sua linguagem ou biblioteca (como `LdapName` em Java, ou filtros parametrizados quando disponíveis). Valide e liste permissões de entrada esperada — caracteres como `*`, `(`, `)`, `\` e nulo devem ser bloqueados ou escapados rigorosamente.

CVE-2026-13696HIGHLDAP Injection in HAVELSAN's Liman MYSEPSS 0.5%CVE-2026-49268HIGHApache Shiro: LDAP DN Injection in DefaultLdapRealmEPSS 0.5%CVE-2024-56841CRITICALA vulnerability has been identified in Mendix LDAP (All versions < V1.1.2). Affected versions of the module are vulnerable to LDAP injectionEPSS 0.5%CVE-2026-41573HIGHOpenAM LDAP Injection via `_queryId` ParameterEPSS 0.5%CVE-2026-31828MEDIUMParse Server has an LDAP injection via unsanitized user input in DN and group filter constructionEPSS 0.5%CVE-2023-31025MEDIUMCVEEPSS 0.5%CVE-2026-44671HIGHZITADEL: LDAP Filter Injection in Login FlowEPSS 0.5%CVE-2026-11748MEDIUMA vulnerability has been identified in centraldogma-server-auth-shiro versions prior to 0.84.0, where the SearchFirstActiveDirectoryRealm suEPSS 0.5%CVE-2025-12764HIGHpgAdmin 4: LDAP injection vulnerability in LDAP authentication flow.EPSS 0.5%CVE-2026-41919CRITICALApache OFBiz: Authentication Bypass due to Improper Neutralization of LDAP Special Elements in DN ConstructionEPSS 0.5%CVE-2026-53658MEDIUMFabric CA: LDAP Injection via Unescaped Username in GetUser FilterEPSS 0.4%CVE-2026-90979HIGHApache Karaf: LDAP filter injection in JAAS LDAP login modulesEPSS 0.4%CVE-2026-19930MEDIUMDolibarr User Cloning card.php ldap injectionEPSS 0.4%CVE-2026-34578HIGHOPNsense has an LDAP Injection via Unsanitized Username in AuthenticationEPSS 0.4%CVE-2026-40193HIGHMaddy Mail Server: LDAP Filter Injection via Unsanitized UsernameEPSS 0.4%CVE-2026-19271HIGHBlind LDAP Injection in Sign-In Endpoint in TÜBİTAK BİLGEM's LiderahenkEPSS 0.4%CVE-2026-49469MEDIUMGLPI: LDAP filter injection in user import featureEPSS 0.4%CVE-2026-21880MEDIUMKanboard LDAP Injection Vulnerability can Lead to User Enumeration and Information DisclosureEPSS 0.4%CVE-2026-110256MEDIUMDockhand before 1.0.19 Username Enumeration via LDAP Injection in tryLdapAuthEPSS 0.4%CVE-2026-94053CRITICALApache MINA SSHD: LDAP injection in sshd-ldapEPSS 0.4%