Description
A missing verification of the TLS host in Nextcloud Mail 1.1.3 allowed a man in the middle attack.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | Nextcloud Mail | 1.1.4 | — |
Unscored
CVE-2020-8156
EUVD-2020-29049GHSA-fgvj-4m6x-j67f
A missing verification of the TLS host in Nextcloud Mail 1.1.3 allowed a man in the middle attack.
Published May 12, 2020 · Updated Aug 4, 2024 · Assigned by hackerone