What is CVE-2021-40537?

CVE-2021-40537 is a low-severity vulnerability in Owncloud User Ldap, classified under Server-Side Request Forgery (SSRF). CVSS score: 2.7/10. Published 2021-09-08.

How severe is CVE-2021-40537?

Low severity. CVSS v3 base score is 2.7 out of 10.

SSRF in Owncloud User Ldap

CVE-2021-40537

Server Side Request Forgery (SSRF) vulnerability exists in owncloud/user_ldap < 0.15.4 in the settings of the user_ldap app. Administration role is necessary for exploitation.

Vulnerability class: SSRF (Server-Side Request Forgery)

EPSS: 0.007 (49.1th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 2.7 (Low). Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N.

Affected products

Owncloud User_ldap
N/a — versions n/a

Weakness classification (CWE)

CWE-918 — Server-Side Request Forgery (SSRF)

References

cve@mitre.org (x_refsource_MISC, Vendor Advisory)

Frequently asked questions

What is CVE-2021-40537?: CVE-2021-40537 is a low-severity vulnerability in Owncloud User Ldap, classified under Server-Side Request Forgery (SSRF). CVSS score: 2.7/10. Published 2021-09-08.
How severe is CVE-2021-40537?: Low severity. CVSS v3 base score is 2.7 out of 10.