CVE-2021-32652

Published: 2021-06-01T19:15Z

Last Modified: 2024-11-21T06:07Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

Nextcloud Mail is a mail app for the Nextcloud platform. A missing permission check in Nextcloud Mail before 1.4.3 and 1.8.2 allows another authenticated users to access mail metadata of other users. Versions 1.4.3 and 1.8.2 contain patches for this vulnerability; no workarounds other than the patches are known to exist. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt