📦 Mail

This vulnerability in Nextcloud Mail allows email account setup details to be sent to attacker-controlled servers when auto-configuration fails. Attackers can register domains like autoconfig.tld to i...

This vulnerability allows authenticated Nextcloud Mail users to inject HTML into email subject lines displayed in the message list. While JavaScript execution is prevented by Nextcloud's Content Secur...