Skip to content
CVE PROGRAM SOURCE RECORD5.1 Medium

CVE-2025-40630

Open redirection vulnerability in IceWarp Mail Server

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
INCIBE

Description

Open redirection vulnerability in IceWarp Mail Server affecting version 11.4.0. This vulnerability allows an attacker to redirect a user to any domain by sending a malicious URL to the victim, for example “ https://icewarp.domain.com//<MALICIOUS_DOMAIN>/%2e%2e” https://icewarp.domain.com///%2e%2e” . This vulnerability has been tested in Firefox.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Icewarp Icewarp Mail Server

Default version status: unaffected

  • 11.4.0affected

References