CVE-2021-32707
In versions prior to 1.9.6, the Nextcloud Mail application does not, by default, render images in emails to not leak the read state.
Does this matter?
Lower severity and a low EPSS score (1.15%). Track it; it rarely justifies an emergency change on its own.
Description
Nextcloud Mail is a mail app for Nextcloud. In versions prior to 1.9.6, the Nextcloud Mail application does not, by default, render images in emails to not leak the read state. The privacy filter failed to filter images with a `background-image` CSS attribute. Note that the images were still passed through the Nextcloud image proxy, and thus there was no IP leakage. The issue was patched in version 1.9.6 and 1.10.0. No workarounds are known to exist.
- CVSS 3.1
- 4.3 MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
- EPSS
- 1.15% probability · 65th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-20, CWE-200
- Affected
- nextcloud/mail
- Source
- security-advisories@github.com
References
- https://github.com/nextcloud/mail/pull/5189Patch, Third Party Advisory
- https://github.com/nextcloud/security-advisories/security/advisories/GHSA-xxp4-44xc-8crhThird Party Advisory
- https://hackerone.com/reports/1215251Exploit, Third Party Advisory
- https://github.com/nextcloud/mail/pull/5189Patch, Third Party Advisory
- https://github.com/nextcloud/security-advisories/security/advisories/GHSA-xxp4-44xc-8crhThird Party Advisory
- https://hackerone.com/reports/1215251Exploit, Third Party Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.