medium4.3
CVE-2019-15610
Improper authorization in the Circles app 0.17.7 causes retaining access when an email address was removed from a circle.
Impact
Improper authorization in the Circles app 0.17.7 causes retaining access when an email address was removed from a circle.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Nextcloud | Circles | before 0.16.11 from 0.16.12 before 0.17.8 |