LDAP Injection
High · Injection · CWE-90
Description
User input alters LDAP query structure.
Root cause
String-built directory filters.
Impact
Auth bypass, data disclosure.
Detection
Directory query anomalies; SAST.
Mitigation
Parameterized LDAP APIs / escaping.
Secure coding
Never concatenate raw input into filters.
Safe lab example
Directory lab apps
Practise related skills in Labs or deepen on Academy library.