# Which Problems Are Solved
The username input to login with LDAP was taken as is without escaping it, which could potentially allow manipulating the filter used to check if the user exists (LDAP injection).
# How the Problems Are Solved
Escape the username when used in the filter.
# Additional Changes
Removed unnecessary parsing of the returned user DN.
# Additional Context
None
(cherry picked from commit 08007da70e)
(cherry picked from commit a56d4bf0bc)
Livio Spring
59fa3018d6