Nextcloud: Mail app - Blind SSRF via Sierve server fonctionnality and sieveHost parameter
A blind SSRF vulnerability was discovered in the Nextcloud Mail application, allowing an attacker to map the server and internal network by sending a crafted request to an unexpected destination. The vulnerability was found in the sieveHost parameter when adding a filter via a sieve filter server...