Nextcloud · Report #1561471
Password disclosure in initial setup of Mail App
Validstatus
lowseverity
17upvotes
3 Sept 2022disclosed
Summary
Security advisory at https://github.com/nextcloud/security-advisories/security/advisories/GHSA-63m3-w68h-3wjg
How it was found
Summary:
https://github.com/nextcloud/mail/issues/823
Steps To Reproduce:
https://github.com/nextcloud/mail/issues/823
Impact
Complete access to a IMAP account and possibly if the password is the same for the NC account, complete account control.