CVE-2023-33201

MediumCVSS 5.3

Published: 05/07/2023(UTC)Updated: 17/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

0.77%

51th percentile - higher than 51% of all known CVEs

Summary

Bouncy Castle for Java before version 1.74 is affected by an LDAP injection vulnerability. This vulnerability affects applications that use an LDAP CertStore from Bouncy Castle to validate X.509 certificates, where the certificate's Subject Name is inserted into an LDAP search filter without proper escaping.

Risk Assessment

Organizations may be exposed to attacks that allow unauthorized access to or manipulation of data by injecting malicious data into LDAP queries.

Recommendation

It is recommended to update Bouncy Castle to version 1.74 or later to mitigate this vulnerability and to implement appropriate security mechanisms when validating certificates.

Original NVD description (English source)

Bouncy Castle For Java before 1.74 is affected by an LDAP injection vulnerability. The vulnerability only affects applications that use an LDAP CertStore from Bouncy Castle to validate X.509 certificates. During the certificate validation process, Bouncy Castle inserts the certificate's Subject Name into an LDAP search filter without any escaping, which leads to an LDAP injection vulnerability.