nextcloud-app-mail

Link package | bugs open | bugs closed | Wiki | GitHub | web search
Description An email app for NextCloud
Version 4.0.0-1 [extra-testing]
3.7.8-1 [extra]

Resolved

Group Affected Fixed Severity Status Ticket
AVG-2495 1.10.1-1 1.10.5-1 Low Fixed
AVG-2145 1.9.5-2 1.10.1-1 Low Fixed
Issue Group Severity Remote Type Description
CVE-2021-39220 AVG-2495 Low Yes Information disclosure
The Nextcloud Mail application prior to versions 1.10.4 and 1.11.0 does by default not render images in emails to not leak the read state or user IP. The...
CVE-2021-32707 AVG-2145 Low Yes Information disclosure
In versions prior to 1.9.6, the Nextcloud Mail application does not, by default, render images in emails to not leak the read state. The privacy filter...

Advisories

Date Advisory Group Severity Type
20 Jul 2021 ASA-202107-41 AVG-2145 Low information disclosure