CVEvulnerability
CVE-2021-3027
6.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2021-03-26
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 6.5 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
- CVSS 2.0 ([email protected])
- 4.0 MEDIUM — AV:N/AC:L/Au:S/C:P/I:N/A:N
- Weaknesses
- CWE-74
Description
app/views_mod/user/user.py in LibrIT PaSSHport through 2.5 is affected by LDAP Injection. There is an information leak through the crafting of special queries, escaping the provided search filter because user input gets no sanitization.
Affected configurations
• librit passhport (<= 2.5)
Related
Weakness · CWE (1)
- CWE-74 Improper Neutralization of Special Elements in Output Used by a Downstream Component weakness
References
- https://github.com/LibrIT/passhport/commit/366b03f607729c4538e91b634ecc57c8398522a1 Patch, Third Party Advisory
- https://github.com/LibrIT/passhport/pull/562 Patch, Third Party Advisory
- https://jorgectf.gitlab.io/disclosure/cve-2021-3027/ Third Party Advisory
- https://github.com/LibrIT/passhport/commit/366b03f607729c4538e91b634ecc57c8398522a1 Patch, Third Party Advisory
- https://github.com/LibrIT/passhport/pull/562 Patch, Third Party Advisory
- https://jorgectf.gitlab.io/disclosure/cve-2021-3027/ Third Party Advisory