CVE-2021-40537

CVE-2021-40537 concerns a Server Side Request Forgery (SSRF) in the owncloud/user_ldap extension prior to version 0.15.4. The vulnerability stems from the user_ldap app settings and is exploitable only by users with Administration privileges. Affected component: ownCloud with the user_ldap app; r...