thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Application & OT Security · Intermediate

LDAP Injection

Injection that alters LDAP queries built from user input, potentially bypassing authentication or disclosing directory data.

Definition

Special characters such as *, (, ), & and | change LDAP filter logic when input is concatenated. Mitigations include escaping LDAP special characters with framework functions, allowlist validation and least-privilege bind accounts.

Example

A user enters a wildcard in a login form that is inserted into an LDAP filter and matches any account.

Exam tip

Fix with proper LDAP escaping/encoding and validation.

Related terms