Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2021-102879
HistoryOct 28, 2021 - 12:00 a.m.

Nextcloud Mail Information Disclosure Vulnerability

2021-10-2800:00:00
China National Vulnerability Database
www.cnvd.org.cn
10
nextcloud
mail
information disclosure
vulnerability
unfiltered images
privacy filter
relative protocols
sensitive information
attack

EPSS

0.001

Percentile

24.8%

Nextcloud is a set of open source self-hosted file synchronization and sharing communication applications platform from Germany-based Nextcloud. Nextcloud Mail applications prior to versions 1.10.4 and 1.11.0 are vulnerable to an information disclosure vulnerability that stems from a privacy filter that does not use relative protocols to filter images. An attacker could exploit this vulnerability to obtain sensitive information.

EPSS

0.001

Percentile

24.8%

Related for CNVD-2021-102879