> ## Documentation Index
> Fetch the complete documentation index at: https://docs.codeant.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# Spring tainted ldap injection

> **spring-tainted-ldap-injection**
>
> Untrusted input might be used to build an LDAP query, which can allow attackers to run arbitrary LDAP queries. If an LDAP query must contain untrusted input then it must be escaped. Ensure data passed to an LDAP query is not controllable or properly sanitize the user input with functions like createEqualityFilter.\
> **Likelihood**: MEDIUM\
> **Confidence**: HIGH\
> **CWE**: \
> \- CWE-90: Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection')
> \
> **OWASP**: \
> \- A01:2017 - Injection
> \
> \- A03:2021 - Injection


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.