Improper Neutralization of Special Elements used in an LDAP Query
CWE-90
The product constructs all or part of an LDAP query using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended LDAP query when it is sent to a downstream component.
We track 41 vulnerabilities of this type. 100% are rated high or critical, and the average CVSS score is 8.4.
Latest Improper Neutralization of Special Elements used in an LDAP Query vulnerabilities
- 7.5 High severity
Active Directory Integration / LDAP Integration: Improper Neutralization of Special Elements used in an LDAP Query
The Active Directory Integration / LDAP Integration plugin for WordPress is vulnerable to LDAP Injection in versions up to, and including, 4.1.5. This is due to insufficient escaping on the supplied username value. This makes it possible for attackers, with an