Limesurvey before 3.17.14 allows remote attackers to bruteforce the login form and enumerate usernames when the LDAP authentication method is used.
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2019-16180.json"