CVE-2025-30191
BaseFortify
Publication date: 2025-10-31
Last updated on: 2025-11-04
Assigner: Open-Xchange
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-1021 | The web application does not restrict or incorrectly restricts frame objects or UI layers that belong to another application or domain, which can lead to user confusion about which interface the user is interacting with. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability involves malicious content in E-Mail that can be used to perform a redressing attack. It tricks users into performing unintended actions or providing sensitive information to a third party, which can lead to further threats. The issue is mitigated by denying attribute values containing HTML fragments through sanitization.
How can this vulnerability impact me? :
The vulnerability can lead to users being tricked into unintended actions or disclosing sensitive information to attackers, potentially enabling further malicious activities against the user or system.
What immediate steps should I take to mitigate this vulnerability?
To mitigate this vulnerability, ensure that attribute values containing HTML fragments are properly sanitized and denied by your email handling or web application sanitization procedures. Educate users to be cautious with email content to avoid being tricked into unintended actions or providing sensitive information. Since no publicly available exploits are known, maintaining updated sanitization practices is key.