CVE-2025-29689

A cross-site scripting XSS vulnerability in OA System before v2025.01.01 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the password parameter at /mail/MailController.java...

CVE-2025-29689

A cross-site scripting XSS vulnerability in OA System before v2025.01.01 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the password parameter at /mail/MailController.java...

CVE-2025-29689

creationtimestamp| type| source ---|---|--- 2025-05-14 21:32:16+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/16412 2025-05-14 22:57:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lp63wiad5w2p...