CVE-2021-30216

Zoho Web mail version NA is affected by an incorrect access control vulnerability. Before a domain expires one needs to configure with Zoho web mail to send mails. Upon domain expiry, the person would still be able to send mail with that account, despite losing ownership of domain.

Date published : 2021-11-16

https://medium.com/nestedif/vulnerability-disclosure-business-logic-allowing-to-send-emails-for-expired-transferred-hosts-4dc0868ded14