Executive Summary

CVE-2026-4045 is a vulnerability in the ProjectSend application up to revision r1945, specifically in the handling of the ldap_email parameter within the Auth.php file.

The vulnerability occurs because the ldap_email parameter is not properly sanitized before being used in an LDAP search filter. This allows an attacker to manipulate the LDAP query by appending wildcard characters.

As a result, the server responds differently depending on whether the queried email exists in the LDAP directory, creating a response discrepancy that can be observed remotely.

This discrepancy enables an attacker to perform email enumeration attacks without needing an account, potentially revealing confidential information.

The attack is considered difficult to execute due to its high complexity, but a public proof-of-concept exploit is available.

Useful 0 Not Useful 0

Impact Analysis

This vulnerability impacts the confidentiality of information by allowing an attacker to enumerate email addresses in the LDAP directory through observable response discrepancies.

An attacker can remotely exploit this flaw without authentication, potentially gaining unauthorized knowledge about valid email accounts.

While the vulnerability does not affect integrity or availability, the exposure of sensitive information can lead to further targeted attacks or privacy violations.

Useful 0 Not Useful 0

Compliance Impact

I don't know

Useful 0 Not Useful 0

Detection Guidance

This vulnerability can be detected by identifying the presence of the vulnerable ProjectSend application up to revision r1945, specifically by checking for the file includes/Classes/Auth.php.

One suggested method is to use Google Hacking techniques to search for URLs containing inurl:includes/Classes/Auth.php to find potentially vulnerable targets.

Since the vulnerability involves manipulation of the ldap_email parameter leading to response discrepancies, network detection could involve monitoring for unusual LDAP query patterns or error message discrepancies related to ldap_email parameters.

No specific commands are provided in the available resources.

Useful 0 Not Useful 0

Mitigation Strategies

No known countermeasures or mitigations have been published for this vulnerability.

It is suggested to replace the affected component or the ProjectSend application version up to r1945 with an alternative product or a fixed version if available.

Since the vendor did not respond to the disclosure, and the exploit is publicly available, immediate mitigation may require restricting access to the vulnerable application or implementing network-level protections to limit exposure.

Useful 0 Not Useful 0