CVE-2021-40537

Server Side Request Forgery SSRF vulnerability exists in owncloud/userldap 0.15.4 in the settings of the userldap app. Administration role is necessary for exploitation...

CVE-2021-40537

CVE-2021-40537 concerns a Server Side Request Forgery (SSRF) in the owncloud/user_ldap extension prior to version 0.15.4. The vulnerability stems from the user_ldap app settings and is exploitable only by users with Administration privileges. Affected component: ownCloud with the user_ldap app; r...