CVE-2025-52463

creationtimestamp| type| source ---|---|--- 2025-07-02 09:09:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsxuikalni2a 2025-07-06 20:55:49+00:00| seen| https://bsky.app/profile/getpokemon7.bsky.social/post/3ltd5tu7zpk2u...

CVE-2025-52463

Cross-site request forgery vulnerability exists in Active! mail 6 BuildInfo: 6.60.06008562 and earlier. If this vulnerability is exploited, unintended E-mail may be sent when a user accesses a specially crafted URL while being logged in...

CVE-2025-52463

Active! mail CVE-2025-52463 is a cross-site request forgery in versions up to 6.60.06008562. Exploitation could cause unintended emails to be sent when a logged-in user visits a crafted URL. Root cause: CSRF without adequate request validation. Mitigation: update to Active! mail 6.61.01008654 as ...