Lucene search

GitHub_MCVELIST:CVE-2021-32651

HistoryJun 01, 2021 - 5:15 p.m.

CVE-2021-32651 LDAP injection via OneDev may leak some LDAP directory information

2021-06-0117:15:12

CWE-90

GitHub_M

www.cve.org

onedev

ldap

injection

vulnerability

version 4.4.1

fix

CVSS3

3.1

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N

AI Score

5.2

Confidence

High

EPSS

0.001

Percentile

23.4%

JSON

OneDev is a development operations platform. If the LDAP external authentication mechanism is enabled in OneDev versions 4.4.1 and prior, an attacker can manipulate a user search filter to send forged queries to the application and explore the LDAP tree using Blind LDAP Injection techniques. The specific payload depends on how the User Search Filter property is configured in OneDev. This issue was fixed in version 4.4.2.

CNA Affected

[
  {
    "product": "onedev",
    "vendor": "theonedev",
    "versions": [
      {
        "status": "affected",
        "version": "<= 4.4.1"
      }
    ]
  }
]

References

github.com/theonedev/onedev/commit/4440f0c57e440488d7e653417b2547eaae8ad19c

github.com/theonedev/onedev/security/advisories/GHSA-5864-2496-4xjf

CVSS3

3.1

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N

AI Score

5.2

Confidence

High

EPSS

0.001

Percentile

23.4%

JSON

Related for CVELIST:CVE-2021-32651