THREATOPS

THREAT OPS › Threat News › [GHSA] GHSA-98q5-5qh2-7w75 (medium) — Central Dogma: LDAP injection in SearchFirstActiveDirectoryRealm enables authentication confusion and audit log evasion

[GHSA] GHSA-98q5-5qh2-7w75 (medium) — Central Dogma: LDAP injection in SearchFirstActiveDirectoryRealm enables authentication confusion and audit log evasion

medgithub_advisoriesPublished 2026-09-11

GHSA-98q5-5qh2-7w75 Severity: medium CVE: CVE-2026-11748

Central Dogma: LDAP injection in SearchFirstActiveDirectoryRealm enables authentication confusion and audit log evasion

# Vulnerability

`SearchFirstActiveDirectoryRealm.findUserDn()` substitutes the user-supplied username from the login form into an LDAP search filter template (default `cn={0}`) **without escaping RFC 4515 filter metachar

Indicators of compromise

CVE-2026-11748cve

Original source: https://github.com/advisories/GHSA-98q5-5qh2-7w75