3 matches found
The vulnerability of the Nextcloud Calendar application, a cloud-based software for creating and using Nextcloud data storage, relates to the use of insufficiently random values. This vulnerability allows attackers to compromise the confidentiality and integrity of the protected information.
The vulnerability of the Nextcloud Calendar application, a cloud-based software for creating and managing Nextcloud data storage, is related to the use of insufficiently random values. Exploiting this vulnerability could allow an attacker to compromise the confidentiality and integrity of the...
CVE-2022-24838
Nextcloud Calendar is a calendar application for the nextcloud framework. SMTP Command Injection in Appointment Emails via Newlines: as newlines and special characters are not sanitized in the email value in the JSON request, a malicious attacker can inject newlines to break out of the RCPT TO:...
ROS-20250326-10
A vulnerability in the Nextcloud calendar cloud software application for creating and utilizing a Nextcloud data warehouse is related to the failure to clean up line breaks and special characters in the email value in a JSON request. Exploitation of the vulnerability could allow an attacker actin...