Description
LDAP filter injection vulnerability in Yandex Database prior to 25.3.1.25 allows a remote attacker with valid LDAP credentials to bypass group membership checks resulting in unauthorized access to the database.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Yandex | Yandex Database | < 25.3.1.25 | 25.3.1.25 |