VULNERABILITY INTELLIGENCE

CVE-2021-3027

CVSS score6.5 MEDIUM
EPSS probability1.17%
CISA KEVNot currently listed
Published2021-03-26
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Description

app/views_mod/user/user.py in LibrIT PaSSHport through 2.5 is affected by LDAP Injection. There is an information leak through the crafting of special queries, escaping the provided search filter because user input gets no sanitization.

Weakness classification

  • nvd@nist.gov: CWE-74

Primary references