A flaw in the LDAP search filter handling of the SearchFirstActiveDirectoryRealm in centraldogma-server-auth-shiro allows an unauthenticated attacker to inject LDAP filter metacharacters. The injection bypasses neutralization and can be used to trigger authentication confusion while exposing the directory structure. The vulnerability does not directly grant arbitrary code execution, but it enables an attacker to disclose directory contents and potentially influence authentication outcomes.

The affected product is LY Corporation Central Dogma, specifically the centraldogma-server-auth-shiro component in versions prior to 0.84.0. Any instance of Central Dogma using these versions is susceptible to the LDAP injection and the resulting enumeration capabilities.

The CVSS score of 6.9 indicates a moderate severity, and no EPSS entry or KEV listing is available at this time, suggesting low current exploit activity. The attack vector is inferred to be network-based, targeting unauthenticated users that can reach the LDAP authentication endpoint. In practice, an attacker only needs to craft a malicious LDAP query through the authentication interface to exploit the filter injection.