CVE-2025-40630
Open redirection vulnerability in IceWarp Mail Server affecting version 11.4.0. This vulnerability allows an attacker to redirect a user to any domain by sending a malicious URL to the victim, for example “ https://icewarp.domain.com//<MALICIOUS_DOMAIN>/%2e%2e” https://icewarp.domain.com///%2e%2e” . This vulnerability has been tested in Firefox.
Vendor
Product
CWE
Yayın Tarihi
2025-05-16 11:15:44
Güncelleme
2025-10-09 19:32:14
Source Identifier
cve-coordination@incibe.es
KEV Date Added
-