Non évaluée

Passbolt API before 5, if the server is misconfigured (with an incorrect installation process and disregarding of Health Check results), can send emai...

CVE-2025-27913 Première détection SecPulse Mar 10, 2025

Description d'origine La description telle que publiée par la source (souvent en anglais).

Passbolt API before 5, if the server is misconfigured (with an incorrect installation process and disregarding of Health Check results), can send email messages with a domain name taken from an attacker-controlled HTTP Host header.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

Références

advisory github.com
advisory nvd.nist.gov
web passbolt.com

Faits clés

Gravité: Non évaluée
Publication: Mar 10, 2025
Première détection SecPulse: Mar 10, 2025
CWE: CWE-348

NVD OSV

Sources de détection

OSV.dev (Open Source Vulnerabilities)Oct 20, 20:08