description: Improper authorization in the Circles app 0.17.7 causes retaining access when an email address was removed from a circle.
problem types: Improper Authorization (CWE-285)
affected:
{
product: Nextcloud Circles
vendor: n/a
versions:
status: affected, version: 17.0.7
}