← CVE Intelligence

CVE-2025-30191

Open-Xchange GmbH / OX App Suite PUBLISHED

Description (CNA)

Malicious content from E-Mail can be used to perform a redressing attack. Users can be tricked to perform unintended actions or provide sensitive information to a third party which would enable further threats. Attribute values containing HTML fragments are now denied by the sanitization procedure. No publicly available exploits are known

Affected (CNA)

Vendor / productVersions
Open-Xchange GmbH / OX App Suiteaffected 0 through 7.6.3-rev77; affected 0 through 8.35.111; affected 0 through 8.38.82; affected 0 through 8.39.79; affected 0 through 8.40.57

CWE

CWE-1021

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.