CVE-2025-3392: hailey888 oa_system Backend MailController.java save cross site scripting
A vulnerability was found in hailey888 oasystem up to 2025.01.01 and classified as problematic. Affected by this issue is the function Save of the file cn/gson/oasys/controller/mail/MailController.java of the component Backend. The manipulation of the argument MailNumberId leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Continious delivery with rolling releases is used by this product. Therefore, no version details of affected nor updated releases are available.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-3392?
CVE-2025-3392 is classified as a problematic vulnerability with significant implications for security.
How do I fix CVE-2025-3392?
To fix CVE-2025-3392, it is recommended to update the hailey888 oa_system to a version beyond 2025.01.01.
Which versions are affected by CVE-2025-3392?
CVE-2025-3392 affects hailey888 oa_system versions up to and including 2025.01.01.
What component is impacted by CVE-2025-3392?
CVE-2025-3392 impacts the MailController.java file in the Backend component of the system.
What specifically causes CVE-2025-3392?
CVE-2025-3392 is caused by the manipulation of the argument MailNumberId in the Save function.