Classic298 b78dabb442 fix: reject empty passwords in LDAP authentication to prevent unauthenticated binds (#23633) ...

Per RFC 4513, a Simple Bind with a non-empty DN but empty password is unauthenticated simple authentication. Many LDAP servers (OpenLDAP default, some AD configs) accept these binds, allowing account takeover without valid credentials.

Rejects empty and whitespace-only passwords before attempting the LDAP bind.

2026-04-12 16:33:57 -05:00

..

data

refac: mv backend files to /open_webui dir

2024-09-04 16:54:48 +02:00

open_webui

fix: reject empty passwords in LDAP authentication to prevent unauthenticated binds (#23633)

2026-04-12 16:33:57 -05:00

.dockerignore

fix: litellm config issue

2024-02-24 22:35:11 -08:00

.gitignore

refac

2024-09-06 04:59:20 +02:00

dev.sh

refac

2026-03-24 19:43:30 -05:00

requirements-min.txt

refac: async db

2026-04-12 14:22:11 -05:00

requirements.txt

refac: async db

2026-04-12 14:22:11 -05:00

start_windows.bat

refac

2026-03-24 19:43:30 -05:00

start.sh

refac

2026-03-24 19:43:30 -05:00