Falhas do tipo CWE-90

65 resultados

Injeção LDAP

Ocorre quando a aplicação constrói consultas LDAP concatenando entrada do usuário sem sanitização, permitindo que um atacante insira caracteres especiais (como `*`, `(`, `)`) para alterar a lógica da busca. Um filtro LDAP mal tratado pode expor dados sensíveis do diretório ou contornar autenticação.

Exemplo

Uma aplicação monta um filtro como `(&(uid=*)(password=INPUT))` onde INPUT vem diretamente do formulário. Se o usuário envia `*))(&(uid=*`, o filtro vira `(&(uid=*)(password=*))(&(uid=*`, retornando qualquer usuário com qualquer senha.

Como mitigar

Use bibliotecas que ofereçam construção segura de filtros LDAP (encoding de caracteres especiais) ou prepared statements equivalentes; nunca concatene strings diretas em filtros. Valide e sanitize entradas segundo o escopo esperado (ex: apenas alfanuméricos para username).

CVE-2021-43350—LDAP filter injection vulnerability in Traffic OpsEPSS 4.4%CVE-2024-27310MEDIUMDOS VulnerabilityEPSS 2.3%CVE-2019-11277HIGHVolume Services is vulnerable to an LDAP injection attackEPSS 1.7%CVE-2023-29050HIGHThe optional "LDAP contacts provider" could be abused by privileged users to inject LDAP filter strings that allow to access content outsideEPSS 1.7%CVE-2021-41276MEDIUMIndirect LDAP injection in TuleapEPSS 1.5%CVE-2022-45910MEDIUMApache ManifoldCF: LDAP Injection Vulnerability - ActiveDirectory AuthoritiesEPSS 1.5%CVE-2021-41232HIGHImproper Neutralization of Special Elements used in an LDAP QueryEPSS 1.5%CVE-2021-43782MEDIUMIndirect LDAP injection in TuleapEPSS 1.4%CVE-2020-5281MEDIUMLDAP connector injection in PerunEPSS 1.3%CVE-2023-28853HIGHMastodon's blind LDAP injection in login allows the attacker to leak arbitrary attributes from LDAP databaseEPSS 1.3%CVE-2021-32651LOWLDAP injection via OneDev may leak some LDAP directory informationEPSS 1.1%CVE-2026-42568MEDIUMYamcs Vulnerable to LDAP Injection in LdapAuthModuleEPSS 1.0%CVE-2022-4254HIGHsssd: libsss_certmap fails to sanitise certificate data used in LDAP filtersEPSS 0.9%CVE-2024-33868CRITICALAn issue was discovered in linqi before 1.4.0.1 on Windows. There is LDAP injection.EPSS 0.9%CVE-2023-51446MEDIUMGLPI LDAP Injection during authenticationEPSS 0.9%CVE-2020-5246HIGHLDAP injection vulnerability in Traccar GPS Tracking SystemEPSS 0.9%CVE-2015-10027MEDIUMhydrian TTRSS-Auth-LDAP Username ldap injectionEPSS 0.8%CVE-2026-58222HIGHSamba: samba ad ldap compare filter injection and trusted-request confusion disclose protected attributesEPSS 0.8%CVE-2026-44617MEDIUMApache Zeppelin: LDAP filter injection in LdapRealm — incomplete fix of CVE-2024-31867EPSS 0.8%CVE-2024-54852CRITICALWhen LDAP connection is activated in Teedy versions between 1.9 to 1.12, the username field of the login form is vulnerable to LDAP injectioEPSS 0.8%