CVE-2022-31014: Improper Neutralization of Special Elements in Output Used by a Downstream Component

Nextcloud server is an open source personal cloud server. Affected versions were found to be vulnerable to SMTP command injection. The impact varies based on which commands are supported by the backend SMTP server. However, the main risk here is that the attacker can then hijack an...