Skip to content
CVE PROGRAM SOURCE RECORD5.4 Medium

CVE-2025-30191

Malicious content from E-Mail can be used to perform a redressing attack. Users can be tricked to perform unintended actions or provide sensitive information to a third party which

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
OX

Description

Malicious content from E-Mail can be used to perform a redressing attack. Users can be tricked to perform unintended actions or provide sensitive information to a third party which would enable further threats. Attribute values containing HTML fragments are now denied by the sanitization procedure. No publicly available exploits are known

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Open-Xchange GmbH OX App Suite

Default version status: unaffected

  • 0 to ≤ 7.6.3-rev77affected
  • 0 to ≤ 8.35.111affected
  • 0 to ≤ 8.38.82affected
  • 0 to ≤ 8.39.79affected
  • 0 to ≤ 8.40.57affected

References