CVE-2021-22896

Nextcloud Mail before 1.9.5 suffers from improper access control due to a missing permission check allowing other authenticated users to create mail aliases for other users.

Date published : 2021-06-11

https://github.com/nextcloud/mail/pull/4864

https://github.com/nextcloud/mail/releases/tag/v1.9.5