CVE-2025-40631
HTTP host header injection vulnerability in Icewarp Mail Server affecting version 11.4.0. By modifying the Host header and adding a payload, arbitrary JavaScript code can be executed on page load. The user must interact with a malicious link to be redirected.
Vendor
Product
CWE
Yayın Tarihi
2025-05-16 11:15:45
Güncelleme
2025-10-09 19:31:54
Source Identifier
cve-coordination@incibe.es
KEV Date Added
-