CVE-2025-27913

7.5HIGH

Passbolt API before 5, if the server is misconfigured (with an incorrect installation process and disregarding of Health Check results), can send email messages with a domain name taken from an attack

Опубликовано: 3/10/2025Обновлено: 6/19/2025
Посмотреть на NVDПосмотреть на MITRE

Описание

Passbolt API before 5, if the server is misconfigured (with an incorrect installation process and disregarding of Health Check results), can send email messages with a domain name taken from an attacker-controlled HTTP Host header.

ИИ-АнализНа базе ИИ

Затронутые продукты

passboltpassbolt_api

Ссылки