| Package | Affected versions | Patched versions |
|---|---|---|
| drupal/ldap_auth | < 2.2.1 | 2.2.1 |
| ldap / active directory integration | ≥ 2.0.1, < 2.2.1≥ 7.x-1.0, ≤ 7.x-1.21≥ 8.x-1.0, ≤ 8.x-1.34 | 2.2.1 |
This module enables users to authenticate using LDAP or Active Directory credentials.
The module does not sufficiently sanitize user-supplied input before incorporating it into an LDAP search filter. This allows an attacker to discover additional information they should not normally be able to.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free