Vulnerability · Published Jun 1, 2021 · Assigned by GitHub_M

CVE-2021-32651LDAP injection via OneDev may leak some LDAP directory information

Low 3.1

In plain English

A low-severity security flaw in onedev from theonedev. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.1% (higher than 65% of all known vulnerabilities).

Severity (CVSS 3.1)3.1Low

Exploit odds (30 days)1.1%top 35.0% of all CVEs

Exploited in the wildNo reportsnot in CISA KEV

Attack toolingNoneno public tooling known

Official description

OneDev is a development operations platform. If the LDAP external authentication mechanism is enabled in OneDev versions 4.4.1 and prior, an attacker can manipulate a user search filter to send forged queries to the application and explore the LDAP tree using Blind LDAP Injection techniques. The specific payload depends on how the User Search Filter property is configured in OneDev. This issue was fixed in version 4.4.2.

Affected products (as reported)

Vendor	Product	Versions
theonedev	onedev	<= 4.4.1

Weakness: CWE-90 · Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N

References

https://github.com/theonedev/onedev/security/advisories/GHSA-5864-2496-4xjf x_refsource_CONFIRM
https://github.com/theonedev/onedev/commit/4440f0c57e440488d7e653417b2547eaae8ad19c x_refsource_MISC