← Back

CVE-2026-81205

nvd nist
Published: Sep 2, 2026Modified: Sep 16, 2026

JSON object

Loading...
5.3
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Exploitability: 3.9 / Impact: 1.4
Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection') vulnerability in Drupal LDAP / Active Directory Integration allows LDAP Injection. This issue affects LDAP / Active Directory Integration versions: from 0.0.0 to 2.2.1.

Affected (3)

Miniorange
1 product
Ldap / Active Directory Integration
Configuration A
3 vulnerable
Vulnerable SoftwareAffected Versions
Miniorange
Ldap / Active Directory Integration
2.0.1 ≤ version < 2.2.1
Ldap / Active Directory Integration
7.x-1.0 ≤ version ≤ 7.x-1.21
Ldap / Active Directory Integration
8.x-1.0 ≤ version ≤ 8.x-1.34

Related CWEs

CWE-90
Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection')
The product constructs all or part of an LDAP query using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended LDAP query when it is sent to a downstream component.

References (1)

Source: mlhess@drupal.org
Third Party Advisory

Timeline

No history available yet.