Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-3322-wpc2-p4m7

Опубликовано: 27 мар. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 3.7

Описание

If auth_username_chars is empty, it is possible to inject arbitrary LDAP filter to Dovecot's LDAP authentication. This leads to potentially bypassing restrictions and allows probing of LDAP structure. Do not clear out auth_username_chars, or install fixed version. No publicly available exploits are known.

If auth_username_chars is empty, it is possible to inject arbitrary LDAP filter to Dovecot's LDAP authentication. This leads to potentially bypassing restrictions and allows probing of LDAP structure. Do not clear out auth_username_chars, or install fixed version. No publicly available exploits are known.

EPSS

Процентиль: 18%
0.00057
Низкий

3.7 Low

CVSS3

Дефекты

CWE-90

Связанные уязвимости

CVSS3: 3.7
ubuntu
22 дня назад

If auth_username_chars is empty, it is possible to inject arbitrary LDAP filter to Dovecot's LDAP authentication. This leads to potentially bypassing restrictions and allows probing of LDAP structure. Do not clear out auth_username_chars, or install fixed version. No publicly available exploits are known.

CVSS3: 3.7
redhat
22 дня назад

If auth_username_chars is empty, it is possible to inject arbitrary LDAP filter to Dovecot's LDAP authentication. This leads to potentially bypassing restrictions and allows probing of LDAP structure. Do not clear out auth_username_chars, or install fixed version. No publicly available exploits are known.

CVSS3: 3.7
nvd
22 дня назад

If auth_username_chars is empty, it is possible to inject arbitrary LDAP filter to Dovecot's LDAP authentication. This leads to potentially bypassing restrictions and allows probing of LDAP structure. Do not clear out auth_username_chars, or install fixed version. No publicly available exploits are known.

CVSS3: 3.7
debian
22 дня назад

If auth_username_chars is empty, it is possible to inject arbitrary LD ...

EPSS

Процентиль: 18%
0.00057
Низкий

3.7 Low

CVSS3

Дефекты

CWE-90