CVE-2021-22896
Published
CVSS v3
4.3
MEDIUM
CVSS v2
4
MEDIUM
Affected
2
PROJECTS
Description
Nextcloud Mail before 1.9.5 suffers from improper access control due to a missing permission check allowing other authenticated users to create mail aliases for other users.
GitHub