High severity8.2NVD Advisory· Published Nov 15, 2024· Updated Jun 17, 2026
CVE-2024-52508
CVE-2024-52508
Description
Nextcloud Mail is the mail app for Nextcloud, a self-hosted productivity platform. When a user is trying to set up a mail account with an email address like user@example.tld that does not support auto configuration, and an attacker managed to register autoconfig.tld, the used email details would be send to the server of the attacker. It is recommended that the Nextcloud Mail app is upgraded to 1.14.6, 1.15.4, 2.2.11, 3.6.3, 3.7.7 or 4.0.0.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- nextcloud/security-advisoriesv5Range: >= 1.9.0, < 1.14.6
Patches
Vulnerability mechanics
References
4- github.com/nextcloud/mail/commit/a84c70e15d814dab6f0e8eda71bbaaf48152079bnvdPatch
- github.com/nextcloud/security-advisories/security/advisories/GHSA-vmhx-hwph-q6mcnvdVendor Advisory
- github.com/nextcloud/mail/pull/9964nvdIssue Tracking
- hackerone.com/reports/2508422nvdIssue Tracking
News mentions
0No linked articles in our index yet.