2 lines
3.0 KiB
JSON
2 lines
3.0 KiB
JSON
{"affected":[{"affectedData":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"source":"cve@mitre.org"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:librit:passhport:*:*:*:*:*:*:*:*","matchCriteriaId":"80FB2365-DFD9-46AA-B636-FD4E4AAC0D6A","versionEndIncluding":"2.5","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"app/views_mod/user/user.py in LibrIT PaSSHport through 2.5 is affected by LDAP Injection. There is an information leak through the crafting of special queries, escaping the provided search filter because user input gets no sanitization."},{"lang":"es","value":"El archivo app/views_mod/user/user.py en LibrIT PaSSHport hasta versión 2.5, está afectado por una inyección de LDAP. Un filtrado de información se presenta por el procesamiento de consultas especiales, escapando del filtro de búsqueda proporcionado debido a que la entrada del usuario no es saneada."}],"id":"CVE-2021-3027","lastModified":"2026-06-17T04:04:35.207","metrics":{"cvssMetricV2":[{"acInsufInfo":false,"baseSeverity":"MEDIUM","cvssData":{"accessComplexity":"LOW","accessVector":"NETWORK","authentication":"SINGLE","availabilityImpact":"NONE","baseScore":4.0,"confidentialityImpact":"PARTIAL","integrityImpact":"NONE","vectorString":"AV:N/AC:L/Au:S/C:P/I:N/A:N","version":"2.0"},"exploitabilityScore":8.0,"impactScore":2.9,"obtainAllPrivilege":false,"obtainOtherPrivilege":false,"obtainUserPrivilege":false,"source":"nvd@nist.gov","type":"Primary","userInteractionRequired":false}],"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":6.5,"baseSeverity":"MEDIUM","confidentialityImpact":"HIGH","integrityImpact":"NONE","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","version":"3.1"},"exploitabilityScore":2.8,"impactScore":3.6,"source":"nvd@nist.gov","type":"Primary"}]},"published":"2021-03-26T03:16:40.647","references":[{"source":"cve@mitre.org","tags":["Patch","Third Party Advisory"],"url":"https://github.com/LibrIT/passhport/commit/366b03f607729c4538e91b634ecc57c8398522a1"},{"source":"cve@mitre.org","tags":["Patch","Third Party Advisory"],"url":"https://github.com/LibrIT/passhport/pull/562"},{"source":"cve@mitre.org","tags":["Third Party Advisory"],"url":"https://jorgectf.gitlab.io/disclosure/cve-2021-3027/"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"],"url":"https://github.com/LibrIT/passhport/commit/366b03f607729c4538e91b634ecc57c8398522a1"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"],"url":"https://github.com/LibrIT/passhport/pull/562"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"url":"https://jorgectf.gitlab.io/disclosure/cve-2021-3027/"}],"sourceIdentifier":"cve@mitre.org","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"CWE-74"}],"source":"nvd@nist.gov","type":"Primary"}]}
|