[Issue 10503] saslauthz LDAP_X_SCOPE_GROUP fails to escape proxyAuthz asserted DN in internal group filter, enabling wildcard substring-filter group-membership bypass
https://bugs.openldap.org/show_bug.cgi?id=10503
Quanah Gibson-Mount quanah@openldap.org changed:
What |Removed |Added ---------------------------------------------------------------------------- Resolution|--- |TEST Status|IN_PROGRESS |RESOLVED
--- Comment #6 from Quanah Gibson-Mount quanah@openldap.org --- head:
• 9b55792b by Howard Chu at 2026-05-19T16:39:09+00:00 ITS#10503 authzTo: reject member attributes with non-DN syntax
RE27:
• 0c8a5875 by Howard Chu at 2026-05-19T22:36:36+00:00 ITS#10503 authzTo: reject member attributes with non-DN syntax
RE26:
• 41d7478a by Howard Chu at 2026-05-19T23:00:51+00:00 ITS#10503 authzTo: reject member attributes with non-DN syntax
-
openldap-its＠openldap.org