Homepage
About Snyk

flask-ldapconn@0.3.2 vulnerabilities

Pure python, LDAP connection and ORM for Flask Applications

Go back to all versions of this package
Report a new vulnerability Found a mistake?

Direct Vulnerabilities

Known vulnerabilities in the flask-ldapconn package. This does not include vulnerabilities belonging to this package’s dependencies.

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.
Fix for free
Vulnerability Vulnerable Version
  • H
Improper Access Control

Flask-LDAPConn is a Pure python, LDAP connection and ORM for Flask Applications

Affected versions of this package are vulnerable to Improper Access Control allowing authentication without a password if LDAP_SECRET was not configured, due to anonymous binds succeeding by default.

How to fix Improper Access Control?

Upgrade Flask-LDAPConn to version 0.10.1 or higher.

[,0.10.1)
Go back to all versions of this package