CVE-2025-66514 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

Nextcloud Mail is the mail app for Nextcloud, a self-hosted productivity platform. Prior to 5.5.3, a stored HTML injection in the Mail app's message list allowe…
Low CVSS: 3.5

CVE-2025-66514

Nextcloud Mail is the mail app for Nextcloud, a self-hosted productivity platform. Prior to 5.5.3, a stored HTML injection in the Mail app's message list allowed an authenticated user to inject HTML into the email subjects. Javascript was correctly blocked by the content security policy of the Nextcloud Server code.
Vendor
Nextcloud
Product
Mail
CWE
CWE-79
Yayın Tarihi
2025-12-05 18:15:57
Güncelleme
2025-12-09 19:23:19
Source Identifier
security-advisories@github.com
KEV Date Added
-

Kategoriler

CWE-79 Mail LOW Nextcloud 2025

Referanslar

https://github.com/nextcloud/mail/commit/c64fcc3b79e0c089b5e1d2e04a07bfa740b2ac09 https://github.com/nextcloud/mail/pull/11740 https://github.com/nextcloud/security-advisories/security/advisories/GHSA-v394-8gpc-6fv5 https://hackerone.com/reports/3357036