← Back to CVE List
CVE-2021-22896
Nextcloud Mail before 1.9.5 suffers from improper access control due to a missing permission check allowing other authenticated users to create mail aliases for other users.
> MITRE Terms of Use apply – see LICENSE‑MITRE.txt