CVE-2025-3392

CVE-2025-3392 affects hailey888 oa_system Backend, specifically the Save function in MailController.java. The root cause is manipulation of the MailNumberId argument leading to cross-site scripting. The issue supports remote exploitation and has public exploit material. Public advisories (Red Hat...

CVE-2025-3392 hailey888 oa_system Backend MailController.java save cross site scripting

A vulnerability was found in hailey888 oasystem up to 2025.01.01 and classified as problematic. Affected by this issue is the function Save of the file cn/gson/oasys/controller/mail/MailController.java of the component Backend. The manipulation of the argument MailNumberId leads to cross site...