Cross-Site Redirection Vulnerability in Open-Xchange Product

CVE-2025-30191

What is CVE-2025-30191?

A vulnerability exists in the Open-Xchange App Suite that enables attackers to exploit malicious content delivered via email to perform redirection attacks. This flaw allows users to be tricked into executing unintended actions or disclosing sensitive information to unauthorized entities, potentially leading to further security threats. To mitigate the risks associated with this vulnerability, the sanitization process now blocks attribute values containing HTML fragments.

References