Email Integrity Vulnerability in Enterprise Protection by Proofpoint

CVE-2025-0431

What is CVE-2025-0431?

A vulnerability in URL rewriting within Proofpoint's Enterprise Protection can be exploited by unauthenticated remote attackers. This flaw allows attackers to send emails that bypass established URL protections, compromising the integrity of the recipient's email. The issue is attributed to the improper filtering of backslashes within URLs and affects all versions up to and including 8.21, 8.20, and 8.18 prior to their respective patches being applied.

References