File Upload Vulnerability in Open-Xchange AppSuite
CVE-2025-30186

5.4MEDIUM

Key Information:

Vendor

Open-xchange Gmbh

Status
Ox App Suite
Vendor
CVE Published:
27 November 2025

What is CVE-2025-30186?

A vulnerability exists in Open-Xchange AppSuite that enables malicious users to upload harmful files. When victims interact with attacker-controlled links, these files can trigger the execution of script code, potentially compromising the user's account. This could lead to unauthorized actions and the exfiltration of sensitive information. Users are advised to implement the available security updates to mitigate this risk.

Affected Version(s)

OX App Suite 0 <= 8.35.107

OX App Suite 0 <= 8.38.89

OX App Suite 0 <= 8.39.83

References

https://documentation.open-xchange.com/appsuite/security/...
vendor-advisory

CVSS V3.1

Score:
5.4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.