CVE-2024-54852

Summary

CVE-2024-54852 is a vulnerability affecting Teedy versions 1.9 to 1.12. When LDAP connection is enabled, the login form's username field becomes susceptible to LDAP injection due to insufficient input validation. An unauthenticated adversary can exploit this flaw to execute malicious actions, including account creation and password spraying. This vulnerability poses a significant risk, as it allows attackers to bypass authentication and gain unauthorized access.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.