CVE-2021-43350 — LDAP filter injection vulnerability in Traffic Ops
An unauthenticated Apache Traffic Control Traffic Ops user can send a request with a specially-crafted username to the POST /login endpoint of any API version to inject unsaniti…
Published: 2021-11-11 · CVSS: Unscored
An unauthenticated Apache Traffic Control Traffic Ops user can send a request with a specially-crafted username to the POST /login endpoint of any API version to inject unsanitized content into the LDAP filter.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7