Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 23:54:11 +0000 CLEANSTART-2026-YN41310 — PAC4J is vulnerable to LDAP Injection in multiple methods https://cve.radiocsirt.org/vuln/cleanstart-2026-yn41310 <p><strong>Affected:</strong> CleanStart: apache-hive</p> <p>Security vulnerability affects the apache-hive package. PAC4J is vulnerable to LDAP Injection in multiple methods.</p> <p><strong>Affected:</strong> CleanStart: apache-hive</p> <p>Security vulnerability affects the apache-hive package. PAC4J is vulnerable to LDAP Injection in multiple methods.</p> https://cve.radiocsirt.org/vuln/cleanstart-2026-yn41310 EUVD-2026-291820 https://cve.radiocsirt.org/vuln/euvd-2026-291820 EUVD-2026-291820 https://cve.radiocsirt.org/vuln/euvd-2026-291820 fkie_cve-2026-40459 https://cve.radiocsirt.org/vuln/fkie_cve-2026-40459 <p>PAC4J is vulnerable to LDAP Injection in multiple methods. A low-privileged remote attacker can inject crafted LDAP syntax into ID-based search parameters, potentially resulting in unauthorized LDAP queries and arbitrary directory operations.</p> <p>This issue was fixed in PAC4J versions 4.5.10, 5.7.10 and 6.4.1</p> <p>PAC4J is vulnerable to LDAP Injection in multiple methods. A low-privileged remote attacker can inject crafted LDAP syntax into ID-based search parameters, potentially resulting in unauthorized LDAP queries and arbitrary directory operations.</p> <p>This issue was fixed in PAC4J versions 4.5.10, 5.7.10 and 6.4.1</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-40459 GHSA-3jrj-7493-fgq2 https://cve.radiocsirt.org/vuln/ghsa-3jrj-7493-fgq2 <p>PAC4J is vulnerable to LDAP Injection in multiple methods. A low-privileged remote attacker can inject crafted LDAP syntax into ID-based search parameters, potentially resulting in unauthorized LDAP queries and arbitrary directory operations.</p> <p>This issue was fixed in PAC4J versions 4.5.10, 5.7.10 and 6.4.1</p> <p>PAC4J is vulnerable to LDAP Injection in multiple methods. A low-privileged remote attacker can inject crafted LDAP syntax into ID-based search parameters, potentially resulting in unauthorized LDAP queries and arbitrary directory operations.</p> <p>This issue was fixed in PAC4J versions 4.5.10, 5.7.10 and 6.4.1</p> https://cve.radiocsirt.org/vuln/ghsa-3jrj-7493-fgq2