CVE-2021-3027

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

app/views_mod/user/user.py in LibrIT PaSSHport through 2.5 is affected by LDAP Injection. There is an information leak through the crafting of special queries, escaping the provided search filter because user input gets no sanitization.

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-74

Affected software

No affected versions have been published.

Timeline

Published: Mar 26, 2021
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2021

CVE-2021-302707.8Possible null pointer dereference in thread profile trap handler due to lack of thread ID validation before dereferencing it in Snapdragon A CVE-2021-302717.8Possible null pointer dereference in trap handler due to lack of thread ID validation before dereferencing it in Snapdragon Auto, Snapdragon CVE-2021-302727.8Possible null pointer dereference in thread cache operation handler due to lack of validation of user provided input in Snapdragon Auto, Sna CVE-2021-302737.5Possible assertion due to improper handling of IPV6 packet with invalid length in destination options header in Snapdragon Auto, Snapdragon CVE-2021-302747.8Possible integer overflow in access control initialization interface due to lack and size and address validation in Snapdragon Auto, Snapdra CVE-2021-302757.8Possible integer overflow in page alignment interface due to lack of address and size validation before alignment in Snapdragon Auto, Snapdr CVE-2021-302767.8Improper access control while doing XPU re-configuration dynamically can lead to unauthorized access to a secure resource in Snapdragon Comp CVE-2021-302785.5Improper input validation in TrustZone memory transfer interface can lead to information disclosure in Snapdragon Auto, Snapdragon Compute, CVE-2021-302797.8Possible access control violation while setting current permission for VMIDs due to improper permission masking in Snapdragon Compute, Snapd CVE-2021-30289.8git-big-picture before 1.0.0 mishandles ' characters in a branch name, leading to code execution.CVE-2021-302817.8Possible unauthorized access to secure space due to improper check of data allowed while flashing the no access control device configuration CVE-2021-302827.8Possible out of bound write in RAM partition table due to improper validation on number of partitions provided in Snapdragon Auto, Snapdrago