PT-2025-48255 · Open Xchange Gmbh · Ox App Suite

CVE-2025-30186 · Publicado 2025-11-27 · Atualizado 2025-11-27

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions (affected versions not specified)

Description A malicious file upload can lead to the execution of script code when a user follows attacker-controlled links. This allows for the execution of unintended actions within the user's account, potentially including the theft of sensitive information. There are no known publicly available exploits at this time.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2025-30186

Produtos afetados

Ox App Suite

Referências · 5

• https://t.me/CVEtracker/38379 · Publicação no Telegram
• https://documentation.open-xchange.com/appsuite/security/advisories/csaf/2025/oxas-adv-2025-0003.json · Aviso do Fabricante
• https://twitter.com/CVEnew/status/1993978955934617762 · Publicação no Twitter
• https://t.me/cveNotify/144180 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2025-30186 · Nota de Segurança