CVE-2020-8156 A missing verification of the TLS host in Nextcloud Mail 1.1.3 allowed a man in the middle attack

Description

A missing verification of the TLS host in Nextcloud Mail 1.1.3 allowed a man in the middle attack.

Affected products and versions

Product	Affected versions	Fixed in
Nextcloud Mail	1.1.4	No fix stated

Other CVEs of Nextcloud Mail

The 2 CVEs of Nextcloud Mail →

CVE-2021-22896 Nextcloud Mail before 1.9.5 suffers from improper access control due to a missing permission check allowing other… Not rated