Fallos del tipo CWE-90

95 resultados

Injeção LDAP

Ocorre quando uma aplicação constrói uma consulta LDAP incluindo entrada do usuário sem sanitização adequada. Um atacante pode injetar caracteres e sintaxe LDAP especiais para modificar a lógica da consulta, contornando autenticação, extraindo dados não autorizados ou alterando estruturas de diretório.

Ejemplo

Um formulário de login que monta a query como `(uid=*)(|(uid=admin` sem escapar caracteres especiais. Um atacante entra `*)(|(uid=` no campo de usuário, alterando a consulta para sempre retornar verdadeiro e ganhando acesso de admin.

Cómo mitigar

Use funções nativas de escape LDAP da sua linguagem ou biblioteca (como `LdapName` em Java, ou filtros parametrizados quando disponíveis). Valide e liste permissões de entrada esperada — caracteres como `*`, `(`, `)`, `\` e nulo devem ser bloqueados ou escapados rigorosamente.

CVE-2026-114420MEDIUMLDAP wildcard injection exposes GINA recipient accountsEPSS 0.4%CVE-2026-67223MEDIUMRabbitMQ: LDAP DN injection via unescaped substitutionEPSS 0.4%CVE-2026-4256HIGHLDAP Injection in PEAKUP's PassGateEPSS 0.4%CVE-2026-39962HIGHLDAP injection in MISP ApacheAuthenticate when using a user-controlled Apache environment variableEPSS 0.4%CVE-2026-93636MEDIUMZimbra Collaboration Suite LDAP Filter Injection via Calendar Resource Attribute NameEPSS 0.3%CVE-2026-80055MEDIUMDell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper NeutraliEPSS 0.3%CVE-2026-81205MEDIUMLDAP / Active Directory Integration - Moderately critical - Information Disclosure - SA-CONTRIB-2026-115EPSS 0.3%CVE-2026-78579MEDIUMImproper Input Sanitization in Okta Access Gateway LDAP Datastore Filter InterpolationEPSS 0.3%CVE-2026-57288LOWJenkins Active Directory Plugin 2.41.1 and earlier does not escape the user name before building the LDAP search filter in the Windows nativEPSS 0.3%CVE-2026-16071MEDIUMKeycloak-services: keycloak-services: ldap entry-dn user search bypasses configured users dn boundaryEPSS 0.3%CVE-2026-74241MEDIUMQuay: ldap referral filter injection in quay external ldap authenticationEPSS 0.3%CVE-2025-35431MEDIUMCISA Thorium LDAP injectionEPSS 0.3%CVE-2025-67493HIGHHomarr: missing input sanitization and possible privilege escalation through ldap search query injectionEPSS 0.3%CVE-2026-24130LOWMoonraker with LDAP Enabled Allows Malicious Search Filter InjectionEPSS 0.3%CVE-2026-27860LOWIf auth_username_chars is empty, it is possible to inject arbitrary LDAP filter to Dovecot's LDAP authentication. This leads to potentially EPSS 0.3%CVE-2025-27686LOWDell Unisphere for PowerMax, version(s) prior to 10.2.0.9 and PowerMax version(s) prior to PowerMax 9.2.4.15, contain an Improper NeutralizaEPSS 0.3%CVE-2026-59652MEDIUMLDAP filter injection in legacy jdk1.4 LDAPStoreHelperEPSS 0.3%CVE-2025-4573MEDIUMLDAP Injection in Mattermost Enterprise Edition When Using Active DirectoryEPSS 0.3%CVE-2025-27631MEDIUMThe TRMTracker web application is vulnerable to LDAP injection attack potentially allowing an attacker to inject code into a query and execuEPSS 0.3%CVE-2026-76373MEDIUMFilter Injection through Action Parameters in AD LDAP app for Splunk SOAREPSS 0.3%