Skip to content
CVE PROGRAM SOURCE RECORD5.4 Medium

CVE-2025-30190

Malicious content at office documents can be used to inject script code when editing a document. Unintended actions can be executed in the context of the users account, including e

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
OX

Description

Malicious content at office documents can be used to inject script code when editing a document. Unintended actions can be executed in the context of the users account, including exfiltration of sensitive information. Please deploy the provided updates and patch releases. No publicly available exploits are known

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Open-Xchange GmbH OX App Suite

Default version status: unaffected

  • 0 to ≤ 8.35.1513817affected
  • 0 to ≤ 8.39.1565928affected
  • 0 to ≤ 8.40.1565934affected
  • 0 to ≤ 8.41.1523927affected

References