Skip to content
OpenAdvisories

Vendor

theonedev

23 known vulnerabilities.

Products

1 result · Clear filters · Feed

  • Low 3.1

    LDAP injection via OneDev may leak some LDAP directory information

    OneDev is a development operations platform. If the LDAP external authentication mechanism is enabled in OneDev versions 4.4.1 and prior, an attacker can manipulate a user search filter to send forged queries to the application and explore the LDAP tree using…