CVE-2025-0431
CVSS 3.1 Score 5.8 of 10 (medium)
Details
Published Mar 19, 2025
CWE ID 790
Summary
CVE-2025-0431 is a vulnerability affecting Enterprise Protection's URL rewriting feature. Unauthenticated remote attackers can exploit this issue by crafting emails with manipulated URLs that bypass URL protections. The flaw arises from inadequate filtering of backslashes in URLs, resulting in compromised email integrity. This vulnerability impacts all versions of 8.21, 8.20, and 8.18 prior to the respective patches: 8.21.0 patch 5115, 8.20.6 patch 5114, and 8.18.6 patch 5113.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.