Skip to content
Sign in
Not rated

CVE-2021-22896 Nextcloud Mail before 1.9.5 suffers from improper access control due to a missing permission check allowing other…

Description

Nextcloud Mail before 1.9.5 suffers from improper access control due to a missing permission check allowing other authenticated users to create mail aliases for other users.

Affected products and versions

Product Affected versions Fixed in
Nextcloud Mail Versions not published

Other CVEs of Nextcloud Mail

The 2 CVEs of Nextcloud Mail →
CVE-2020-8156 A missing verification of the TLS host in Nextcloud Mail 1.1.3 allowed a man in the middle attack Not rated
Track this CVE