Description
Nextcloud Mail before 1.9.5 suffers from improper access control due to a missing permission check allowing other authenticated users to create mail aliases for other users.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | Nextcloud Mail | Fixed in 1.9.5 | — |