title: Blind SSRF in the Nextcloud Mail app on avatar endpoint
description: Nextcloud Mail is a mail app in Nextcloud. A blind SSRF attack allowed to send GET requests to services running in the same web server. It is recommended that the Mail app is update to version 3.02, 2.2.5 or 1.15.3.
problem types: CWE-918: Server-Side Request Forgery (SSRF)
affected:
{
vendor: nextcloud
product: security-advisories
versions:
version: < 1.15.3, status: affected
version: < 2.2.5, status: affected
version: < 3.02, status: affected
}
metrics:
cvssV3_1: [
attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 3.5
baseSeverity: LOW
confidentialityImpact: LOW
integrityImpact: NONE
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N
version: 3.1
]