CVE-2020-35775

CITSmart before 9.1.2.23 allows LDAP Injection.

• CWE-74

• http://packetstormsecurity.com/files/162181/CITSmart-ITSM-9.1.2.22-LDAP-Injection.htmlThird Party Advisory, VDB Entry
• https://citsmart.com.br/solucoes/itsm-2/Product, Vendor Advisory
• https://docs.citsmart.com/pt-br/citsmart-platform-9/get-started/about-citsmart/release-notes.htmlRelease Notes, Vendor Advisory
• https://github.com/nardnet/citsmart/blob/master/WEB-INF/src/br/com/centralit/citcorpore/integracao/ad/LDAPUtils.javaThird Party Advisory
• https://rdstation-static.s3.amazonaws.com/cms/files/86153/1597862259Ebook-Whatsnew-CITSmart.pdfProduct
• http://packetstormsecurity.com/files/162181/CITSmart-ITSM-9.1.2.22-LDAP-Injection.htmlThird Party Advisory, VDB Entry
• https://citsmart.com.br/solucoes/itsm-2/Product, Vendor Advisory
• https://docs.citsmart.com/pt-br/citsmart-platform-9/get-started/about-citsmart/release-notes.htmlRelease Notes, Vendor Advisory
• https://github.com/nardnet/citsmart/blob/master/WEB-INF/src/br/com/centralit/citcorpore/integracao/ad/LDAPUtils.javaThird Party Advisory
• https://rdstation-static.s3.amazonaws.com/cms/files/86153/1597862259Ebook-Whatsnew-CITSmart.pdfProduct

Published

Feb 15, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-35765doFilter in com.adventnet.appmanager.filter.UriCollector in …8.8
• CVE-2020-35766The test suite in libopendkim in OpenDKIM through 2.10.3 all…7.8
• CVE-2020-35769miniserv.pl in Webmin 1.962 on Windows mishandles special ch…9.8
• CVE-2020-3577A vulnerability in the ingress packet processing path of Cis…7.4
• CVE-2020-35773The site-offline plugin before 1.4.4 for WordPress lacks cer…8.8
• CVE-2020-35774server/handler/HistogramQueryHandler.scala in Twitter Twitte…5.4
• CVE-2020-35776A buffer overflow in res_pjsip_diversion.c in Sangoma Asteri…6.5
• CVE-2020-35777NETGEAR DGN2200v1 devices before v1.0.0.58 are affected by c…8.4
• CVE-2020-35778Certain NETGEAR devices are affected by CSRF. This affects G…8.8
• CVE-2020-35779NETGEAR NMS300 devices before 1.6.0.27 are affected by denia…8.6
• CVE-2020-3578A vulnerability in the web services interface of Cisco Adapt…6.5
• CVE-2020-35780NETGEAR NMS300 devices before 1.6.0.27 are affected by denia…6.5