2021-06-11 15:49:38
hackerone
PUBLISHED
Nextcloud Mail before 1.9.5 suffers from improper access control due to a missing permission check allowing other authenticated users to create mail aliases for other users.