Cross-Site Redirection Vulnerability in Open-Xchange Product
CVE-2025-30191
What is CVE-2025-30191?
A vulnerability exists in the Open-Xchange App Suite that enables attackers to exploit malicious content delivered via email to perform redirection attacks. This flaw allows users to be tricked into executing unintended actions or disclosing sensitive information to unauthorized entities, potentially leading to further security threats. To mitigate the risks associated with this vulnerability, the sanitization process now blocks attribute values containing HTML fragments.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Affected Version(s)
OX App Suite 0 <= 7.6.3-rev77
OX App Suite 0 <= 8.35.111
OX App Suite 0 <= 8.38.82
References
CVSS V3.1
Timeline
Vulnerability published
Vulnerability Reserved
