CVE-2021-33668

2021-06-0913:15:07

Google

osv.dev

improper input sanitization

ldap query injection

unauthenticated user

confidentiality

software

AI Score

6.9

Confidence

High

EPSS

0.002

Percentile

55.9%

JSON

Due to improper input sanitization, specially crafted LDAP queries can be injected by an unauthenticated user. This could partially impact the confidentiality of the application.

References

github.com/SAP/scimono/security/advisories/GHSA-wg9g-w4fg-3qqc