René's URL Explorer Experiment

{"@context":"https://schema.org","@type":"DiscussionForumPosting","headline":"[Go]: Add Improper LDAP Authentication query","articleBody":"### Query PR\n\nhttps://github.com/github/codeql/pull/13366\n\n### Language\n\nGoLang\n\n### CVE(s) ID list\n\n- [CVE-2017-14623](https://github.com/advisories/GHSA-x27w-qxhg-343v)\n\n### CWE\n\nCWE-287\n\n### Report\n\nThis query covers Improper LDAP Authentication, that con occur when an application uses user-supplied data to establish a connection to a LDAP server.\r\n\r\nI used a dataflow configuration looking for UntrustedFlowSource flowing to the password used in LDAP binding.\r\n\r\nIn order to avoid false positives I used RegexpCheck and equalityAsSanitizerGuard as barriers. For `equalityAsSanitizerGuard` I have taken as an example the `equalityAsSanitizerGuard` used in SSRF query. The difference here is that the query will consider whether the string to be compared is empty or not (this should avoid several possible FP)\r\n\r\n\n\n### Are you planning to discuss this vulnerability submission publicly? (Blog Post, social networks, etc).\n\n- [X] Yes\n- [ ] No\n\n### Blog post link\n\n_No response_","author":{"url":"https://github.com/maikypedia","@type":"Person","name":"maikypedia"},"datePublished":"2023-06-04T23:41:13.000Z","interactionStatistic":{"@type":"InteractionCounter","interactionType":"https://schema.org/CommentAction","userInteractionCount":13},"url":"https://github.com/762/securitylab/issues/762"}