FKIE_CVE-2025-0431

Vulnerability from fkie_nvd - Published: 2025-03-19 17:15 - Updated: 2025-03-19 17:15
Severity ?
5.8 (Medium) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N
Summary
Enterprise Protection contains a vulnerability in URL rewriting that allows an unauthenticated remote attacker to send an email which bypasses URL protections impacting the integrity of recipient's email. This occurs due to improper filtering of backslashes within URLs and affects all versions of 8.21, 8.20 and 8.18 prior to 8.21.0 patch 5115, 8.20.6 patch 5114 and 8.18.6 patch 5113 respectively.
References
security@proofpoint.comhttps://www.proofpoint.com/us/security/security-advisories/pfpt-sa-2025-0001
Impacted products
Vendor Product Version
To clipboard 

{
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Enterprise Protection contains a vulnerability in URL rewriting that allows an unauthenticated remote attacker to send an email which bypasses URL protections impacting the integrity of recipient\u0027s email.  This occurs due to improper filtering of backslashes within URLs and affects all versions of 8.21, 8.20 and 8.18 prior to 8.21.0 patch 5115, 8.20.6 patch 5114 and 8.18.6 patch 5113 respectively."
    },
    {
      "lang": "es",
      "value": "Enterprise Protection contiene una vulnerabilidad en la reescritura de URL que permite a un atacante remoto no autenticado enviar un correo electr\u00f3nico que elude las protecciones de URL, lo que afecta la integridad del correo electr\u00f3nico del destinatario. Esto se debe a un filtrado incorrecto de barras invertidas en las URL y afecta a todas las versiones de 8.21, 8.20 y 8.18 anteriores a la versi\u00f3n 8.21.0 (parche 5115), la versi\u00f3n 8.20.6 (parche 5114) y la versi\u00f3n 8.18.6 (parche 5113), respectivamente."
    }
  ],
  "id": "CVE-2025-0431",
  "lastModified": "2025-03-19T17:15:41.217",
  "metrics": {
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "NETWORK",
          "availabilityImpact": "NONE",
          "baseScore": 5.8,
          "baseSeverity": "MEDIUM",
          "confidentialityImpact": "NONE",
          "integrityImpact": "LOW",
          "privilegesRequired": "NONE",
          "scope": "CHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N",
          "version": "3.1"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 1.4,
        "source": "security@proofpoint.com",
        "type": "Secondary"
      }
    ]
  },
  "published": "2025-03-19T17:15:41.217",
  "references": [
    {
      "source": "security@proofpoint.com",
      "url": "https://www.proofpoint.com/us/security/security-advisories/pfpt-sa-2025-0001"
    }
  ],
  "sourceIdentifier": "security@proofpoint.com",
  "vulnStatus": "Awaiting Analysis",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-790"
        }
      ],
      "source": "security@proofpoint.com",
      "type": "Secondary"
    }
  ]
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.



Detection rules are retrieved from Rulezet.