vetkit.py.ldap-injection.filter-building
An LDAP search filter is built with string interpolation and no escaping. Characters such as * ( ) in the value alter the filter (LDAP injection, authentication bypass).
Last updated:
Suite: Security
python
An LDAP search filter is built with string interpolation and no escaping. Characters such as * ( ) in the value alter the filter (LDAP injection, authentication bypass).
Category: SECURITY · Engine rule severity: WARNING
How to fix it
Escape every value with ldap.filter.escape_filter_chars / ldap3.utils.conv.escape_filter_chars, or build the filter with ldap.filter.filter_format.
References
Source: packages/engine/rules/sast/python.yml.
Generated from shipped rule definitions at build time. Matching is a review signal, not proof of exploitability. “generic” denotes text matching, not complete language or framework coverage. Runtime configuration and available tools affect whether a rule runs.