Vulnerabilities > CVE-2023-45660 - Server-Side Request Forgery (SSRF) vulnerability in Nextcloud Mail
Attack vector
NETWORK Attack complexity
LOW Privileges required
LOW Confidentiality impact
NONE Integrity impact
NONE Availability impact
LOW Summary
Nextcloud mail is an email app for the Nextcloud home server platform. In affected versions a missing check of origin, target and cookies allows for an attacker to abuse the proxy endpoint to denial of service a third server. It is recommended that the Nextcloud Mail is upgraded to 2.2.8 or 3.3.0. There are no known workarounds for this vulnerability.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 13 |