Approved changes feed: RSS · Atom

cpe:2.3:a:owncloud:user_ldap:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorOwncloud (7adb7c81-0e09-5084-ad84-9888a985e435)
ProductUser Ldap (18fca6f4-fe95-5d85-85a9-3ec6b5b40782)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/owncloud/user_ldap purl2cpe 2026-06-01 10:16:35.799285

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-40537 vulnerable 2026-06-03 14:45:24.301071 Details available
Server Side Request Forgery (SSRF) vulnerability exists in owncloud/user_ldap < 0.15.4 in the settings of the user_ldap app. Administration role is necessary for exploitation.
Published: 2021-09-08T17:26:56.000Z
Updated: 2024-08-04T02:44:10.803Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.