Lucene search
GoogleOSV:CVE-2021-32652HistoryJun 01, 2021 - 7:15 p.m.
CVE-2021-32652
2021-06-0119:15:07
Google
osv.dev
5
nextcloud mail
permission check
authenticated users
mail metadata
vulnerability
patch
Nextcloud Mail is a mail app for the Nextcloud platform. A missing permission check in Nextcloud Mail before 1.4.3 and 1.8.2 allows another authenticated users to access mail metadata of other users. Versions 1.4.3 and 1.8.2 contain patches for this vulnerability; no workarounds other than the patches are known to exist.
Related
prion
prion
Design/Logic Flaw
2021-06-01 19:15:00
nextcloud
nextcloud
Missing permission check on email metadata retrieval
2021-06-01 18:06:08
cvelist
cvelist
CVE-2021-32652 Missing permission check on email metadata retrieval
2021-06-01 19:05:11
hackerone
hackerone
Nextcloud: Take over a mail account due missing validation of account id
2021-02-03 17:20:10
nvd
nvd
CVE-2021-32652
2021-06-01 19:15:07
cve
cve
CVE-2021-32652
2021-06-01 19:15:07