CVE-2023-25160

CVE-2023-25160 (Nextcloud Mail) is an IDOR vulnerability in Nextcloud Mail that lets an attacker access a mailbox by ID, revealing subjects and the first characters of emails. Affected versions are Nextcloud Mail prior to 2.2.1 (Nextcloud 25), 1.14.5 (Nextcloud 22–24), 1.12.9 (Nextcloud 21), and ...