CVE-2025-30191

Katalog CVE

CVSS 5.4 · Medium EPSS 0,19%

Kerentanan Improper Restriction of Rendered UI Layers or Frames. Skor CVSS 3.1 5.4 (Medium) menurut open-xchange.com.

Deskripsi (NVD)

Malicious content from E-Mail can be used to perform a redressing attack. Users can be tricked to perform unintended actions or provide sensitive information to a third party which would enable further threats. Attribute values containing HTML fragments are now denied by the sanitization procedure. No publicly available exploits are known

Rincian

Terbit di NVD

31 Oktober 2025

Terakhir diubah

7 Oktober 2026

Status NVD

Deferred

CVSS 3.1

5.4 (Medium), sumber open-xchange.com
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-1021: Improper Restriction of Rendered UI Layers or Frames

EPSS (30 hari)

0,19% peluang dieksploitasi; lebih tinggi dari 8,4% CVE lain

Produk dan versi terdampak

NVD belum mencantumkan data produk (CPE) untuk CVE ini. Produk yang terdampak biasanya disebut di deskripsi dan di advisory vendor pada daftar referensi.

Referensi dan perbaikan

• https://documentation.open-xchange.com/appsuite/security/advisories/csaf/2025/oxas-adv-2025-0002.json