Public

Project privacy set to public. By default, its content is available to everyone (authenticated or not). Please note that more restrictive permissions might exist on some items.

stable

Clone or download

Read-only

Merge commit 'refs/changes/33/24533/1' of ssh://gerrit.tuleap.net:29418/tuleap into HEAD

Download Browse

* ssh://gerrit.tuleap.net:29418/tuleap: request #24168: Indirect LDAP injection via the ldap_id attribute of a user when checking if it exists Change-Id: I515a376ccfb37d9be0a86344fe6d8840e6223166

+9 −1
Lorentz Romain (lorentzr) 2021-11-25 11:12
Lorentz Romain (lorentzr) 2021-11-25 11:12
c57c3696d97dd92f874f856ef694945f10a77d16
git #tuleap/stable/c57c3696d97dd92f874f856ef694945f10a77d16

Modified Files

Side by side diff
Inline diff
Name
M plugins/ldap/include/LDAP_ProjectGroupDao.class.php +3 −0 Go to diff View file
M plugins/ldap/include/LDAP_UserManager.class.php +1 −1 Go to diff View file
M src/common/DB/Compat/Legacy2018/CompatPDODataAccess.php +3 −0 Go to diff View file
M src/common/DB/Compat/Legacy2018/LegacyDataAccessInterface.php +2 −0 Go to diff View file