<![CDATA[Possible nginx LDAP security flaw]]>Hi,

I just came across these two posts:

Apparently, there is a flaw in the nginx-ldap-auth module.

I know that Cloudron uses nginx a lot, and LDAP as well, so I wanted to make you aware of this.

I lack the knowledge to determine whether Cloudron is vulnerable.

Could you please investigate and remediate if necessary?

Thanks!

]]>https://forum.cloudron.io/topic/6832/possible-nginx-ldap-security-flawRSS for NodeMon, 11 May 2026 17:56:52 GMTSat, 16 Apr 2022 16:48:06 GMT60<![CDATA[Reply to Possible nginx LDAP security flaw on Sun, 17 Apr 2022 11:50:12 GMT]]>Thanks for the info, but we do not use this module, so we are all good.

]]>https://forum.cloudron.io/post/46262https://forum.cloudron.io/post/46262Sun, 17 Apr 2022 11:50:12 GMT<![CDATA[Reply to Possible nginx LDAP security flaw on Sat, 16 Apr 2022 22:36:12 GMT]]>pinging @staff

]]>https://forum.cloudron.io/post/46254https://forum.cloudron.io/post/46254Sat, 16 Apr 2022 22:36:12 GMT