CVE-2025-52557 — Mail-0 Zero Session Hijacking Via Email
Mail-0's Zero is an open-source email solution. In version 0.8 it's possible for an attacker to craft an email that executes javascript leading to session hijacking due to impro…
Published: 2025-06-21 · CVSS: 8.6 · CVSS 4.0
Mail-0's Zero is an open-source email solution. In version 0.8 it's possible for an attacker to craft an email that executes javascript leading to session hijacking due to improper sanitization. This issue has been patched in version 0.81.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7