DOM-Based Cross-Site Scripting Vulnerability in Barracuda Mail Archiver Login Interface

CVE-2025-8319

What is CVE-2025-8319?

The Barracuda Mail Archiver's login interface is susceptible to a DOM-based Cross-Site Scripting (XSS) vulnerability. This flaw allows an attacker to inject arbitrary JavaScript or HTML directly into the Document Object Model (DOM) through manipulation of the error= URL parameter. Such exploitation can lead to unauthorized access, data leakage, and potentially compromise user sessions. Organizations using the affected versions of Barracuda Mail Archiver should take immediate action to mitigate this vulnerability to protect their systems and sensitive data.

References