PT-2025-44595 · Open Xchange Gmbh · Ox App Suite

Published 2025-10-31 · Updated 2025-10-31 · CVE-2025-30191

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions (affected versions not specified)

Description Malicious content delivered via email can be leveraged to conduct a redressing attack. This allows attackers to deceive users into performing unintended actions or disclosing sensitive information to a third party, potentially leading to further threats. The sanitization procedure now blocks attribute values containing HTML fragments.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Clickjacking

Weakness Enumeration

CWE-1021

Related Identifiers

CVE-2025-30191

Affected Products

Ox App Suite

References · 6

• https://documentation.open-xchange.com/appsuite/security/advisories/csaf/2025/oxas-adv-2025-0002.json · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-30191 · Security Note
• https://twitter.com/CVEnew/status/1984194021187858499 · Twitter Post
• https://t.me/cveNotify/141089 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1984239622403010791 · Twitter Post
• https://t.me/CVEtracker/36276 · Telegram Post