CVE-2021-32651 LDAP injection via OneDev may leak some LDAP directory information

What is CVE-2021-32651?

CVE-2021-32651 is a low-severity vulnerability in theonedev onedev, published on 1 Jun 2021. Any signed-in user can exploit it over the network, with no action from the victim.

Official description

OneDev is a development operations platform. If the LDAP external authentication mechanism is enabled in OneDev versions 4.4.1 and prior, an attacker can manipulate a user search filter to send forged queries to the application and explore the LDAP tree using Blind LDAP Injection techniques. The specific payload depends on how the User Search Filter property is configured in OneDev. This issue was fixed in version 4.4.2.

Weakness: CWE-90

Which versions are affected by CVE-2021-32651?

It affects 1 product.

Products include Onedev Project Onedev.

How do I fix CVE-2021-32651?

No fix has been published for CVE-2021-32651 yet. Limit exposure of the affected software until one is available.

Is CVE-2021-32651 being exploited?

There is no known exploitation of CVE-2021-32651 in the wild and no public exploit code.

Other vulnerabilities in theonedev onedev

• CVE-2021-21242 Pre-Auth Unsafe Deserialization on AttachmentUploadServet Critical 10.0
• CVE-2021-21243 Pre-Auth Unsafe Deserialization on KubernetesResource Critical 10.0
• CVE-2021-21244 Pre-Auth SSTI via Bean validation message tampering Critical 10.0
• CVE-2021-21245 Pre-Auth Arbitrary File Upload Critical 10.0
• CVE-2022-39206 CI/CD Docker Escape in OneDev Critical 9.9

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• GitHub advisory
• How this page is made

Also known as GHSA-5864-2496-4xjf, GHSA-r89m-qpxm-ccgx.