Lucene search
+L

1 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/02/13 12:00 a.m.•9 views

CVE-2023-25160: Authorization Bypass Through User-Controlled Key

Nextcloud Mail is an email app for the Nextcloud home server platform. Prior to versions 2.2.1, 1.14.5, 1.12.9, and 1.11.8, an attacker can access the mail box by ID getting the subjects and the first characters of the emails. Users should upgrade to Mail 2.2.1 for Nextcloud 25, Mail 1.14.5 for...

5.3CVSS5.8AI score0.0046EPSS
SaveExploits0References3
Rows per page
Query Builder