—
DRUPAL-CONTRIB-2026-115
Details
This module enables users to authenticate using LDAP or Active Directory credentials.
The module does not sufficiently sanitize user-supplied input before incorporating it into an LDAP search filter. This allows an attacker to discover additional information they should not normally be able to.
Are you affected?
Enter the version of the package you're using.
Affected packages
Packagist:https://packages.drupal.org/8 / drupal/ldap_auth
Introduced in:
0 Fixed in: 2.2.1 Upgrade drupal/ldap_auth to 2.2.1 or newer (ecosystem packagist:https://packages.drupal.org/8).