npm/ldapauth-fork CVE-2015-7294: high 7.5, EPSS 2.14%

LDAP Injection in ldapauth

Action: Upgrade ldapauth-fork to 2.3.3 or later.

npm i ldapauth-fork@2.3.3

Affected

Fixed versions

Sources

• osv: GHSA-82mg-x548-gq3j
• https://nvd.nist.gov/vuln/detail/CVE-2015-7294
• https://github.com/vesse/node-ldapauth-fork/issues/21
• https://github.com/vesse/node-ldapauth-fork/commit/3feea43e243698bcaeffa904a7324f4d96df60e4
• https://github.com/vesse/node-ldapauth-fork
• https://www.npmjs.com/advisories/18
• https://www.npmjs.com/advisories/19
• http://www.openwall.com/lists/oss-security/2015/09/18/4
• http://www.openwall.com/lists/oss-security/2015/09/18/8
• http://www.openwall.com/lists/oss-security/2015/09/21/2

CVE-2015-7294 · published 2020-08-31T22:49:46Z · modified 2023-11-08T03:57:59.693271Z · JSON