← All advisories

Medium severity6.1NVD Advisory· Published Jul 30, 2025· Updated Jun 17, 2026

CVE-2025-8319

CVE-2025-8319

Description

the BMA login interface allows arbitrary JavaScript or HTML to be written straight into the page’s Document Object Model via the error= URL parameter

Affected products

3

Barracuda Networks/Message Archiver Firmware
cpe:2.3:o:barracuda:message_archiver_firmware:5.4.2.002:*:*:*:*:*:*:*
Barracuda Networks/Mail Archiverllm-create
Barracuda Networks/Barracuda Message Archivercpe-rescue
Range: 5.4.2.002

Patches

Vulnerability mechanics

References

1

bugcrowd.com/disclosures/30a330ef-0885-458c-a64f-2ad63d196b4d/dom-based-cross-site-scripting-xss-with-keylogger-injection-via-the-error-parameter-in-barracuda-mail-archivernvdExploitIssue TrackingMitigationThird Party Advisory

News mentions

0

No linked articles in our index yet.