title: LDAP Injection Vulnerability in Apache Kerby
description: An LDAP Injection vulnerability exists in the LdapIdentityBackend of Apache Kerby before 2.0.3.
problem types: CWE-74 Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
affected:
{
collectionURL: https://repo.maven.apache.org/maven2
defaultStatus: unaffected
packageName: org.apache.kerby:ldap-backend
product: Apache Kerby LDAP Backend
vendor: Apache Software Foundation
versions:
lessThan: 2.0.3, status: affected, version: 0, versionType: semver
}
metrics:
other: [
content: {'text': 'moderate'}
type: Textual description of severity
]