| Package | Affected versions | Patched versions |
|---|---|---|
≥ 2.2.0, < 2.2.8≥ 3.0.0, < 3.3.0 | 2.2.83.3.0 |
Nextcloud mail is an email app for the Nextcloud home server platform. In affected versions a missing check of origin, target and cookies allows for an attacker to abuse the proxy endpoint to denial of service a third server. It is recommended that the Nextcloud Mail is upgraded to 2.2.8 or 3.3.0. There are no known workarounds for this vulnerability.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free