CVE-2021-32652

Published June 1st, 2021

View on NVD ↗

CVSS v3

8.8

HIGH

CVSS v2

MEDIUM

Affected

PROJECT

Description

Nextcloud Mail is a mail app for the Nextcloud platform. A missing permission check in Nextcloud Mail before 1.4.3 and 1.8.2 allows another authenticated users to access mail metadata of other users. Versions 1.4.3 and 1.8.2 contain patches for this vulnerability; no workarounds other than the patches are known to exist.

nextcloud/security-advisories

👮 Security advisories of Nextcloud

GitHub