This site is the archived OWASP Foundation Wiki and is no longer accepting Account Requests.
To view the new OWASP Foundation website, please visit https://owasp.org
OWASP Periodic Table of Vulnerabilities - LDAP Injection
From OWASP
Return to Periodic Table Working View
LDAP Injection
Root Cause Summary
LDAP queries are formed using dynamic data without performing proper encoding, allowing the data to change the functional meaning of the query.
Browser / Standards Solution
None
Perimeter Solution
None
Generic Framework Solution
The framework should provide safe libraries for interacting with LDAP servers which automatically encode unsafe data. The framework should not allow application code to directly interact with LDAP servers.
Custom Framework Solution
None
Custom Code Solution
None
Discussion / Controversy
None
