LDAP Injection

High Severity Technical Guide

Vulnerability Description

LDAP Injection occurs when untrusted user input is directly concatenated into a query used to search an LDAP directory, allowing attackers to bypass authentication or extract sensitive organizational details.

Remediation Guide

To resolve this vulnerability, follow these config changes or developer practices:

Always sanitize and encode user input before building LDAP search queries, or use library-provided query parameters and filters.

Verify Your Fix

After applying the remediation, run an external attack-surface scan to verify that the vulnerability is no longer detected by WebScanify.

Is your website vulnerable?

Run a free security scan now to identify missing headers, outdated JS, and other deployment vulnerabilities.