5.4
Moyenne
CVE-2025-30191 Malicious content from E-Mail can be used to perform a redressing attack
Description
Malicious content from E-Mail can be used to perform a redressing attack. Users can be tricked to perform unintended actions or provide sensitive information to a third party which would enable further threats. Attribute values containing HTML fragments are now denied by the sanitization procedure. No publicly available exploits are known
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| OX App Suite 8.40 | premières → 8.40.57 | Pas de correctif indiqué |
| OX App Suite 8.39 | premières → 8.39.79 | Pas de correctif indiqué |
| OX App Suite 8.38 | premières → 8.38.82 | Pas de correctif indiqué |
| OX App Suite 8.35 | premières → 8.35.111 | Pas de correctif indiqué |
| OX App Suite 7.6 | premières → 7.6.3-rev77 | Pas de correctif indiqué |
Autres CVE de OX App Suite
Les 27 CVE de OX App Suite →
CVE-2025-59026
Malicious content uploaded as file can be used to execute script code when following attacker-controlled links
5.4
Moyenne
CVE-2025-59025
Malicious e-mail content can be used to execute script code
6.1
Moyenne
CVE-2025-30190
Malicious content at office documents can be used to inject script code when editing a document
5.4
Moyenne
CVE-2025-30186
Malicious content uploaded as file can be used to execute script code when following attacker-controlled links
5.4
Moyenne