Skip to content
CVE PROGRAM SOURCE RECORD5.8 Medium

CVE-2025-0431

Enterprise Protection Backslash URL Rewrite Bypass

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Proofpoint

Description

Enterprise Protection contains a vulnerability in URL rewriting that allows an unauthenticated remote attacker to send an email which bypasses URL protections impacting the integrity of recipient's email. This occurs due to improper filtering of backslashes within URLs and affects all versions of 8.21, 8.20 and 8.18 prior to 8.21.0 patch 5115, 8.20.6 patch 5114 and 8.18.6 patch 5113 respectively.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Proofpoint Enterprise Protection

Default version status: affected

  • 8.18.6 to < patch 5113affected
  • 8.20.6 to < patch 5114affected
  • 8.21.0 to < patch 5115affected

References