Is-user-valid Project

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Is-user-valid Project records in CISA KEV

No Is-user-valid Project vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record

TI-2021-06033 CVE-2021-23335 · GHSA-22cm-3qf2-2wc7

LOW 36

All versions of package is-user-valid are vulnerable to LDAP Injection which can lead to either authentication bypass or information exposure.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01436 Published 2021-02-11 No fix listed CWE-74