Skip to content
Threat Feed

Product

Lemur (< 1.9.0)

1 brief RSS
high advisory

Lemur LDAP Filter Injection Vulnerability

Lemur versions before 1.9.0 are vulnerable to LDAP filter injection, where an authenticated LDAP user can inject LDAP filter metacharacters through the username field to manipulate group membership queries and escalate their privileges to administrator.

Lemur ldap injection privilege-escalation
2r 1t