Script Injection Vulnerability in Open-Xchange Appsuite Products

CVE-2025-30190

What is CVE-2025-30190?

This vulnerability allows an attacker to inject malicious script code through crafted office documents. When such documents are edited, unintended actions may be executed within the user’s account context. This can lead to the unauthorized exfiltration of sensitive information. It is crucial for users to apply the necessary updates and patches to mitigate this risk.

References