CVE-2021-22896
First published: Fri Jun 11 2021(Updated: )
Nextcloud Mail before 1.9.5 suffers from improper access control due to a missing permission check allowing other authenticated users to create mail aliases for other users.
Credit: support@hackerone.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Nextcloud Nextcloud | <1.9.5 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID of this vulnerability?
The vulnerability ID is CVE-2021-22896.
What is the severity of CVE-2021-22896?
The severity of CVE-2021-22896 is medium with a score of 4.3.
What is the affected software by CVE-2021-22896?
The affected software is Nextcloud Mail before version 1.9.5.
What is the impact of CVE-2021-22896?
The impact of CVE-2021-22896 is that other authenticated users can create mail aliases for other users.
How can I fix CVE-2021-22896?
You can fix CVE-2021-22896 by updating Nextcloud Mail to version 1.9.5 or newer.
- collector/nvd-index
- vendor/nextcloud
- product/nextcloud
- canonical/nextcloud nextcloud