Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-9rm2-9q89-9524

Опубликовано: 05 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 9.8

Описание

In OpenLDAP 2.x before 2.5.12 and 2.6.x before 2.6.2, a SQL injection vulnerability exists in the experimental back-sql backend to slapd, via a SQL statement within an LDAP query. This can occur during an LDAP search operation when the search filter is processed, due to a lack of proper escaping.

In OpenLDAP 2.x before 2.5.12 and 2.6.x before 2.6.2, a SQL injection vulnerability exists in the experimental back-sql backend to slapd, via a SQL statement within an LDAP query. This can occur during an LDAP search operation when the search filter is processed, due to a lack of proper escaping.

EPSS

Процентиль: 95%
0.18446
Средний

9.8 Critical

CVSS3

Дефекты

CWE-89

Связанные уязвимости

CVSS3: 9.8
ubuntu
больше 3 лет назад

In OpenLDAP 2.x before 2.5.12 and 2.6.x before 2.6.2, a SQL injection vulnerability exists in the experimental back-sql backend to slapd, via a SQL statement within an LDAP query. This can occur during an LDAP search operation when the search filter is processed, due to a lack of proper escaping.

CVSS3: 6.5
redhat
больше 3 лет назад

In OpenLDAP 2.x before 2.5.12 and 2.6.x before 2.6.2, a SQL injection vulnerability exists in the experimental back-sql backend to slapd, via a SQL statement within an LDAP query. This can occur during an LDAP search operation when the search filter is processed, due to a lack of proper escaping.

CVSS3: 9.8
nvd
больше 3 лет назад

In OpenLDAP 2.x before 2.5.12 and 2.6.x before 2.6.2, a SQL injection vulnerability exists in the experimental back-sql backend to slapd, via a SQL statement within an LDAP query. This can occur during an LDAP search operation when the search filter is processed, due to a lack of proper escaping.

CVSS3: 9.8
msrc
больше 3 лет назад

In OpenLDAP 2.x before 2.5.12 and 2.6.x before 2.6.2 a SQL injection vulnerability exists in the experimental back-sql backend to slapd via a SQL statement within an LDAP query. This can occur during an LDAP search operation when the search filter is processed due to a lack of proper escaping.

CVSS3: 9.8
debian
больше 3 лет назад

In OpenLDAP 2.x before 2.5.12 and 2.6.x before 2.6.2, a SQL injection ...

EPSS

Процентиль: 95%
0.18446
Средний

9.8 Critical

CVSS3

Дефекты

CWE-89