CVE-2025-8319 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

the BMA login interface allows arbitrary JavaScript or HTML to be written straight into the page’s Document Object Model via the error= URL parameter
Medium CVSS: 6.1

CVE-2025-8319

the BMA login interface allows arbitrary JavaScript or HTML to be written straight into the page’s Document Object Model via the error= URL parameter
Vendor
Barracuda
Product
Message Archiver Firmware
CWE
CWE-79
Yayın Tarihi
2025-07-30 00:15:38
Güncelleme
2025-08-06 14:05:44
Source Identifier
4ac701fe-44e9-4bcd-9585-dd6449257611
KEV Date Added
-

Kategoriler

CWE-79 Message Archiver Firmware MEDIUM Barracuda 2025

Referanslar

https://bugcrowd.com/disclosures/30a330ef-0885-458c-a64f-2ad63d196b4d/dom-based-cross-site-scripting-xss-with-keylogger-injection-via-the-error-parameter-in-barracuda-mail-archiver https://bugcrowd.com/disclosures/30a330ef-0885-458c-a64f-2ad63d196b4d/dom-based-cross-site-scripting-xss-with-keylogger-injection-via-the-error-parameter-in-barracuda-mail-archiver