Vendor
theonedev
23 known vulnerabilities.
Products
1 result · Clear filters · Feed
-
Low 3.1
LDAP injection via OneDev may leak some LDAP directory information
OneDev is a development operations platform. If the LDAP external authentication mechanism is enabled in OneDev versions 4.4.1 and prior, an attacker can manipulate a user search filter to send forged queries to the application and explore the LDAP tree using…