Classic298andGitHub b78dabb442 fix: reject empty passwords in LDAP authentication to prevent unauthenticated binds (#23633) ...

Per RFC 4513, a Simple Bind with a non-empty DN but empty password is unauthenticated simple authentication. Many LDAP servers (OpenLDAP default, some AD configs) accept these binds, allowing account takeover without valid credentials.

Rejects empty and whitespace-only passwords before attempting the LDAP bind.

2026-04-12 16:33:57 -05:00

..

data

…

open_webui

fix: reject empty passwords in LDAP authentication to prevent unauthenticated binds (#23633)

2026-04-12 16:33:57 -05:00

.dockerignore

…

.gitignore

…

dev.sh

refac

2026-03-24 19:43:30 -05:00

requirements-min.txt

refac: async db

2026-04-12 14:22:11 -05:00

requirements.txt

refac: async db

2026-04-12 14:22:11 -05:00

start_windows.bat

refac

2026-03-24 19:43:30 -05:00

start.sh

refac

2026-03-24 19:43:30 -05:00