Sign in Subscribe

← All advisories

Unrated severityNVD Advisory· Published Jul 29, 2025· Updated Jul 30, 2025

CVE-2025-8319

CVE-2025-8319

Description

the BMA login interface allows arbitrary JavaScript or HTML to be written straight into the page’s Document Object Model via the error= URL parameter

Affected products

1

Barracuda/Barracuda Message Archiverv5
Range: 5.4.2.002

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

1

bugcrowd.com/disclosures/30a330ef-0885-458c-a64f-2ad63d196b4d/dom-based-cross-site-scripting-xss-with-keylogger-injection-via-the-error-parameter-in-barracuda-mail-archivermitre

News mentions

0

No linked articles in our index yet.