An LDAP Injection vulnerability exists in the LdapIdentityBackend of Apache Kerby before 2.0.3.
2023-02-20T16:15:10.677
2025-08-11T14:24:58.983
Analyzed
CVSSv3.1: 9.8 (CRITICAL)
| Type | Vendor | Product | Version/Range | Vulnerable? |
|---|---|---|---|---|
| Application | apache | kerby_ldap_backend | < 2.0.3 | Yes |