Skip to content
CVE PROGRAM SOURCE RECORD8.6 High

CVE-2025-52557

Mail-0 Zero Session Hijacking Via Email

Description

Mail-0's Zero is an open-source email solution. In version 0.8 it's possible for an attacker to craft an email that executes javascript leading to session hijacking due to improper sanitization. This issue has been patched in version 0.81.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Mail-0 Zero

  • = 0.8affected

References