Description (CNA)
Finsys Dockhand through 1.0.18 contains an LDAP injection vulnerability in the tryLdapAuth function in src/lib/server/auth.ts, which inserts the login username into the LDAP search filter without escaping wildcard characters. Unauthenticated attackers can submit incremental wildcard patterns such as 'a*' to /api/auth/login and measure response timing to enumerate valid LDAP usernames while evading per-username rate limiting.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Finsys / dockhand | affected 0 before 1.0.19; unaffected 1.0.19 |
CWE
CWE-90