5.4
Medium
CVE-2025-30191 Malicious content from E-Mail can be used to perform a redressing attack
Description
Malicious content from E-Mail can be used to perform a redressing attack. Users can be tricked to perform unintended actions or provide sensitive information to a third party which would enable further threats. Attribute values containing HTML fragments are now denied by the sanitization procedure. No publicly available exploits are known
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| OX App Suite 8.40 | earliest → 8.40.57 | No fix stated |
| OX App Suite 8.39 | earliest → 8.39.79 | No fix stated |
| OX App Suite 8.38 | earliest → 8.38.82 | No fix stated |
| OX App Suite 8.35 | earliest → 8.35.111 | No fix stated |
| OX App Suite 7.6 | earliest → 7.6.3-rev77 | No fix stated |
Other CVEs of OX App Suite
The 27 CVEs of OX App Suite →
CVE-2025-59026
Malicious content uploaded as file can be used to execute script code when following attacker-controlled links
5.4
Medium
CVE-2025-59025
Malicious e-mail content can be used to execute script code
6.1
Medium
CVE-2025-30190
Malicious content at office documents can be used to inject script code when editing a document
5.4
Medium
CVE-2025-30186
Malicious content uploaded as file can be used to execute script code when following attacker-controlled links
5.4
Medium