CVE-2015-7294: Ldapauth-Fork Project Ldapauth-Fork

High severity, CVSS 7.5. EPSS: 2.1% chance of exploitation in the next 30 days.

ldapauth-fork before 2.3.3 allows remote attackers to perform LDAP injection attacks via a crafted username.

Affected products

• Ldapauth-Fork Project Ldapauth-Fork: before 2.3.3 (fixed in 2.3.3)

Published 2017-09-06. Last modified 2026-06-17.