CVE-2025-52557
Mail-0 Zero Session Hijacking Via Email
Résumé
Mail-0 Zero Session Hijacking Via Email
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Mail-0's Zero is an open-source email solution. In version 0.8 it's possible for an attacker to craft an email that executes javascript leading to session hijacking due to improper sanitization. This issue has been patched in version 0.81.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- patch github.com
- patch github.com