CVE-2025-30191CWE-1021

CVE-2025-30191

Medium · published October 31, 2025

CVSS v3.1
5.4
EPSS
0%
Percentile
8.6
In the wild
Unconfirmed
What it is

Malicious content from E-Mail can be used to perform a redressing attack. Users can be tricked to perform unintended actions or provide sensitive information to a third party which would enable further threats. Attribute values containing HTML fragments are now denied by the sanitization procedure. No publicly available exploits are known

The record
Technical detail
CVSS v3.1
5.4 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00194 · 8.6th percentile
Weakness
CWE-1021 · Improper Restriction of Rendered UI Layers or Frames
Published
2025-10-31T13:15Z
References (1)
https://documentation.open-xchange.com/appsuite/security/advisories/csaf/2025/oxas-adv-2025-0002.json · [email protected]
EPSS history
Timeline
  • 31 OCT 08:54Z
    Malicious content from E-Mail can be used to perform a redressing attack
    cvelistv5