Skip to content
CVE PROGRAM SOURCE RECORD5.4 Medium

CVE-2025-30186

Malicious content uploaded as file can be used to execute script code when following attacker-controlled links. Unintended actions can be executed in the context of the users accou

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
OX

Description

Malicious content uploaded as file can be used to execute script code when following attacker-controlled links. Unintended actions can be executed in the context of the users account, including exfiltration of sensitive information. Please deploy the provided updates and patch releases. No publicly available exploits are known

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Open-Xchange GmbH OX App Suite

Default version status: unaffected

  • 0 to ≤ 8.35.107affected
  • 0 to ≤ 8.38.89affected
  • 0 to ≤ 8.39.83affected
  • 0 to ≤ 8.40.68affected
  • 0 to ≤ 8.41.60affected

References