LDAP Injection

Inserting unfiltered input into LDAP queries to alter directory searches.

Specifications & Metrics

cwe

CWE-90

impact

High

Core Principles & Analysis

• A star or parenthesis in a login field can widen a directory filter to every entry.
• Same family as SQL injection, aimed at directory services instead of databases.
• Parameterised queries and strict input classes close it.