CVE-2021-22896

• BIT-nextcloud-2021-22896
• GHSA-jmgp-77jq-fjp3

• 4.3 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N CVSS Calculator

{
    "unresolved_ranges": [
        {
            "source": "CPE_RANGE",
            "vendor_product": "nextcloud:nextcloud",
            "extracted_events": [
                {
                    "fixed": "1.9.5"
                },
                {
                    "fixed": "1.9.5"
                },
                {
                    "fixed": "1.9.5"
                }
            ],
            "cpes": [
                "cpe:2.3:a:nextcloud:nextcloud:*:*:*:*:*:*:*:*"
            ]
        },
        {
            "source": "DESCRIPTION",
            "extracted_events": [
                {
                    "fixed": "1.9.5"
                }
            ]
        }
    ]
}

• https://github.com/nextcloud/mail/releases/tag/v1.9.5
• https://github.com/nextcloud/security-advisories/security/advisories/GHSA-jmgp-77jq-fjp3
• https://hackerone.com/reports/1129996
• https://github.com/nextcloud/mail/pull/4864