Description
Improper authorization in the Circles app 0.17.7 causes retaining access when an email address was removed from a circle.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | Nextcloud Circles | 17.0.7 | — |
Unscored
CVE-2019-15610
EUVD-2019-6567GHSA-5jc8-jgjw-38vr
Improper authorization in the Circles app 0.17.7 causes retaining access when an email address was removed from a circle.
Published Feb 4, 2020 · Updated Aug 5, 2024 · Assigned by hackerone