A missing verification of the TLS host in Nextcloud Mail 1.1.3 allowed a man in the middle attack.
- https://hackerone.com/reports/803734
No PoCs found on GitHub currently.