| Package | Affected versions | Patched versions |
|---|---|---|
≥ 1.5.5, < 1.8.2< 1.4.3 | 1.8.21.4.3 |
Nextcloud Mail is a mail app for the Nextcloud platform. A missing permission check in Nextcloud Mail before 1.4.3 and 1.8.2 allows another authenticated users to access mail metadata of other users. Versions 1.4.3 and 1.8.2 contain patches for this vulnerability; no workarounds other than the patches are known to exist.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free