x/vulndb: potential Go vuln in github.com/apache/trafficcontrol: GHSA-mg2c-rc36-p594

[GoVulnBot]

In GitHub Security Advisory GHSA-mg2c-rc36-p594, there is a vulnerability in the following Go packages or modules:

Unit	Fixed	Vulnerable Ranges
github.com/apache/trafficcontrol	5.1.4	>= 5.1.0, < 5.1.4

Cross references:

• Module github.com/apache/trafficcontrol appears in issue x/vulndb: potential Go vuln in github.com/apache/trafficcontrol: GHSA-wp47-9r3h-xfgq #585 NOT_IMPORTABLE
• Module github.com/apache/trafficcontrol appears in issue x/vulndb: potential Go vuln in github.com/apache/trafficcontrol: GHSA-gw97-f6h8-gm94 #602 EFFECTIVELY_PRIVATE
• Module github.com/apache/trafficcontrol appears in issue x/vulndb: potential Go vuln in github.com/apache/trafficcontrol/traffic_ops/traffic_ops_golang/login: GHSA-3f8r-4qwm-r7jf #624 EFFECTIVELY_PRIVATE
• Module github.com/apache/trafficcontrol appears in issue x/vulndb: potential Go vuln in github.com/apache/trafficcontrol: GHSA-pw59-4qgf-jxr8 #702 NOT_GO_CODE

See doc/triage.md for instructions on how to triage this report.

modules:
    - module: github.com/apache/trafficcontrol
      versions:
        - introduced: 5.1.0
          fixed: 5.1.4
      packages:
        - package: github.com/apache/trafficcontrol
    - module: github.com/apache/trafficcontrol
      versions:
        - introduced: 6.0.0
          fixed: 6.0.1
      packages:
        - package: github.com/apache/trafficcontrol
summary: Apache Traffic Control Traffic Ops Vulnerable to LDAP Injection in github.com/apache/trafficcontrol
cves:
    - CVE-2021-43350
ghsas:
    - GHSA-mg2c-rc36-p594
references:
    - web: https://nvd.nist.gov/vuln/detail/CVE-2021-43350
    - web: http://www.openwall.com/lists/oss-security/2021/11/11/3
    - web: http://www.openwall.com/lists/oss-security/2021/11/11/4
    - web: http://www.openwall.com/lists/oss-security/2021/11/17/1
    - web: https://trafficcontrol.apache.org/security
    - advisory: https://github.com/advisories/GHSA-mg2c-rc36-p594
source:
    id: GHSA-mg2c-rc36-p594

[gopherbot]

Change https://go.dev/cl/582535 mentions this issue: data/reports: batch add unreviewed reports

[gopherbot]

Change https://go.dev/cl/591199 mentions this issue: data/reports: add 5 unreviewed reports