Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-3322-wpc2-p4m7

Опубликовано: 27 мар. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 3.7

Описание

If auth_username_chars is empty, it is possible to inject arbitrary LDAP filter to Dovecot's LDAP authentication. This leads to potentially bypassing restrictions and allows probing of LDAP structure. Do not clear out auth_username_chars, or install fixed version. No publicly available exploits are known.

If auth_username_chars is empty, it is possible to inject arbitrary LDAP filter to Dovecot's LDAP authentication. This leads to potentially bypassing restrictions and allows probing of LDAP structure. Do not clear out auth_username_chars, or install fixed version. No publicly available exploits are known.

EPSS

Процентиль: 15%
0.00047
Низкий

3.7 Low

CVSS3

Дефекты

CWE-90

Связанные уязвимости

CVSS3: 3.7
redhat
5 дней назад

If auth_username_chars is empty, it is possible to inject arbitrary LDAP filter to Dovecot's LDAP authentication. This leads to potentially bypassing restrictions and allows probing of LDAP structure. Do not clear out auth_username_chars, or install fixed version. No publicly available exploits are known.

CVSS3: 3.7
nvd
5 дней назад

If auth_username_chars is empty, it is possible to inject arbitrary LDAP filter to Dovecot's LDAP authentication. This leads to potentially bypassing restrictions and allows probing of LDAP structure. Do not clear out auth_username_chars, or install fixed version. No publicly available exploits are known.

CVSS3: 3.7
debian
5 дней назад

If auth_username_chars is empty, it is possible to inject arbitrary LD ...

EPSS

Процентиль: 15%
0.00047
Низкий

3.7 Low

CVSS3

Дефекты

CWE-90